Privacy Policy – Flowers Lewisham

Introduction

This Privacy Policy outlines how Flowers Lewisham collects, processes, stores, and protects your personal data when you place an order with us. We are committed to handling your information with transparency and integrity, in full compliance with the UK General Data Protection Regulation (UK GDPR) and relevant data protection laws. This policy applies to all customers ordering from Flowers Lewisham within Lewisham and surrounding districts.

What Data We Collect

When you place an order with Flowers Lewisham, we collect and process several types of personal data to deliver our products and services. The types of information we may collect include:

• Identification and Contact Details: Your name, delivery address, and telephone number, used for order fulfilment and communication.
• Payment Information: Cardholder names and limited transaction details, strictly necessary to process your payment. We do not store full card details.
• Order Information: Details about the products you order, delivery instructions, and recipient details if you order flowers for someone else.
• Communication Records: Records of your correspondence with us, including enquiries and complaints.
• Technical Data: We may collect your IP address, browser type, and device information if you use our website, to ensure security and service quality.

Lawful Basis for Processing

Flowers Lewisham processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: We require your personal data to fulfil our contract with you and to deliver your orders. Without this data, we cannot process your purchase or provide our services.
• Legal Obligations: We process some data to comply with legal and regulatory requirements, such as tax or accounting rules.
• Legitimate Interests: We may use your data for operational reasons, such as improving our services, preventing fraud, or communicating about your order, provided these do not override your rights.
• Consent: Where we rely on your consent (for example, sending marketing communications), we will make this clear, and you have the right to withdraw your consent at any time.

Data Retention

We retain your personal information only as long as is necessary to fulfil the purposes for which it was collected, including:

• Fulfilling your order and addressing any issues (such as delivery or customer service queries).
• Maintaining records required for legal, regulatory, or tax reasons.
• Safeguarding against potential disputes.

Typically, we keep your order and contact data for up to six years from your last order, in line with statutory limitation periods for contractual claims and legal record-keeping obligations. Data used only for marketing purposes will be kept until you opt out or request erasure.

Who Processes Your Data (Processors)

Flowers Lewisham works with trusted third-party service providers to help deliver our services. These may include:

• Payment Service Providers: To securely process your payments on our behalf. These providers comply with relevant payment security and data protection standards.
• Delivery Partners: To deliver your flowers and gifts. Only the data necessary for delivery (such as recipient’s name and address) is shared with couriers.
• IT and Website Hosting Providers: For secure management of our website and communication systems.
• Professional Advisors: Such as accountants or legal consultants, to fulfil our legal obligations.

We require all third-party processors to use your personal data only as instructed by Flowers Lewisham, to ensure its security and confidentiality, and to comply with UK GDPR.

We do not sell or rent your personal information to third parties.

International Data Transfers

Flowers Lewisham aims to keep all personal data within the UK or the European Economic Area (EEA). If it becomes necessary to transfer your data outside these areas (for example, due to the use of an international service provider), we will ensure that suitable safeguards, such as standard contractual clauses or adequacy decisions, are in place to protect your information.

Your Rights

Under the UK GDPR, you have a range of rights regarding your personal data. These include:

• The right to access: Know what personal data we hold about you and request a copy.
• The right to rectification: Request correction of inaccurate or incomplete data.
• The right to erasure: Request deletion of your personal data where there is no lawful reason to continue processing it.
• The right to restrict processing: Request restriction of processing in certain situations.
• The right to data portability: Receive your data in a portable format or ask us to transfer it to another provider where feasible.
• The right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• The right to withdraw consent: Where consent is the basis for processing, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not complied with data protection laws.

How We Protect Your Data

We use a combination of technical and organisational measures to keep your personal data secure. These include encrypted payment processing, restricted access to data, regular staff training, secure data storage, and regular review of our data protection procedures.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our processes or legal requirements. We encourage you to review this policy periodically for any updates. Significant changes will be highlighted where appropriate.

Contacting Flowers Lewisham About Data Protection

If you have questions, concerns, or would like to exercise any of your data protection rights, please contact us directly. We are committed to responding promptly and helping you understand and exercise your rights.

This Privacy Policy is effective as of its publication date and applies to all Flowers Lewisham customers in Lewisham and surrounding districts.