Flowers West Norwood: Privacy Policy Details
Introduction
At Flowers West Norwood, we are committed to protecting and respecting the privacy of all customers placing orders in West Norwood and the surrounding districts. This Privacy Policy explains what personal data we collect, how and why we use it, the lawful bases under the General Data Protection Regulation (GDPR), how long we keep your data, who processes it, and the rights you have over your information.
Who This Privacy Policy Applies To
This policy applies to all individuals who place or attempt to place orders with Flowers West Norwood from within West Norwood or its nearby areas. Whether you interact with us in person, online, or over the phone, this notice is intended to inform you about how we handle your data as required by law.
What Data We Collect
We collect and process the following types of personal information:
- Identification Data: First and last name, delivery address, billing address
- Contact Data: Phone number (if provided), email address (if provided)
- Order Data: Details of products ordered, delivery instructions, order notes
- Payment Data: Payment card details or financial transaction information (handled securely through our payment processor; not stored directly by us)
- Correspondence Data: Any communications or feedback sent to us by email, contact form, or phone
- Technical Data: IP address, browser type, and cookies where you use our website (see Cookie section for more)
How and Why We Use Your Data
We only use your personal data where we have a legal reason for doing so. The main purposes for which we process your data include:
- Order Fulfillment: To receive, process, and deliver your flower orders correctly and efficiently
- Customer Service: To communicate with you regarding your order, answer any questions, and respond to your queries
- Payments: To facilitate and confirm secure payments for products and services
- Legal Compliance: To comply with legal obligations, such as record keeping for tax and accounting
- Improving Our Services: To analyze our services and customer interactions with the aim of improving our offerings (using anonymized data wherever possible)
Lawful Bases for Processing Your Data
Under GDPR, we use the following lawful bases for processing your data:
- Contractual Necessity: Processing data necessary for entering into or performing a contract (i.e., fulfilling your order)
- Legitimate Interests: For our internal administrative purposes, managing our business, and ensuring quality customer service, provided our interests are not overridden by your rights
- Legal Obligation: Where we are required to store information for tax or legal compliance
- Consent: For activities like sending you marketing messages, where you have given clear consent (you may withdraw consent at any time)
Who Processes Your Data
Your data is accessed only by Flowers West Norwood staff or trusted partners who are directly involved in processing your order. Where we use third-party service providers (“processors”), such as for payments or deliveries, we ensure they are GDPR-compliant and only process your data on our instructions. Relevant processors may include:
- Payment processors (for secure card payments)
- Delivery couriers (for delivering flowers and gifts)
- IT or web service companies providing us with order management or hosting infrastructure
We do not sell or share your data with third parties for their own marketing purposes.
Data Retention
We only keep your personal data for as long as is necessary to meet the purposes described above, including satisfying legal, tax, or accounting requirements. Typically, this means we will retain transactional and order-related information for up to 7 years in line with regulatory obligations. Other communication or marketing data will be kept as long as you have an ongoing relationship with us or until you withdraw your consent.
Cookies and Website Data
Our website may use cookies to enhance your experience, understand usage patterns, or enable essential functions (such as keeping your order basket). Where cookies are non-essential, we ask for your consent. You can manage your cookie preferences through your browser settings at any time.
Your Rights Under GDPR
You have a number of rights related to your personal data, which may include the right to:
- Access the personal information we hold about you
- Request correction of incorrect or incomplete information
- Request erasure of your data (“the right to be forgotten”) in certain circumstances
- Object to or restrict certain types of processing, particularly direct marketing
- Request a copy of your data in a machine-readable (“portability”) format
- Withdraw consent where processing is based on your consent
- Lodge a complaint with your local data protection regulator if you believe your data rights have been breached
Data Security
We take appropriate security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Access to your information is limited to only those employees and partners who need it to fulfill your order or provide customer support. We train our staff on data protection and have internal policies to ensure ongoing security.
Updates to This Policy
We may update this Privacy Policy from time to time, for example to reflect changes in law or our business practices. Revised versions will be posted with an updated date. We encourage you to review this policy regularly.
Contacting Us
If you have any questions about this Privacy Policy or wish to exercise one of your data rights, please contact us using the usual Flowers West Norwood customer service channels. We will do our best to address your requests promptly and with respect for your privacy.
