Flowers Barnes Privacy Policy
Introduction
This Privacy Policy explains how Flowers Barnes ('we', 'us', 'our') collects, uses, stores, and protects the personal data of all customers placing orders from Barnes and surrounding districts. We are committed to safeguarding your personal information in compliance with the General Data Protection Regulation (GDPR) and all applicable data protection legislation. This Policy applies whenever you interact with us, including when placing orders for our products and services.
What Data We Collect
When you place an order or interact with Flowers Barnes, we collect the following categories of personal data:
- Contact Details: Name, address, telephone number, and delivery address (if different).
- Order Information: Details of your purchase, including delivery date, product selection, order amount, and specific instructions regarding your order.
- Payment Details: Payment information, transaction reference numbers, and confirmation of completed payment (note: payment card numbers are processed by our payment processor and are not stored by us).
- Communications: Any correspondence with us (for example, order enquiries and feedback).
- Technical Data: IP address, device information, browser type, and analytics data collected through cookies when you use our website (where applicable).
Lawful Basis for Processing
Flowers Barnes processes your personal data on the following lawful bases as set out under Article 6 of the GDPR:
- Performance of a Contract: We process your data to fulfil your orders, deliver goods, and provide customer support.
- Legal Obligation: We retain certain transaction records as required by UK tax and accounting regulations.
- Legitimate Interests: We may use your details for internal business purposes, such as improving our services, provided these interests are not overridden by your rights and interests.
- Consent: Where required (such as for non-essential cookies or optional marketing communications), we seek your explicit consent before processing your data.
How We Use Your Data
Your personal data is used for the following purposes:
- To process, confirm, and deliver your flower orders.
- To manage customer payments, refunds, and accounting records.
- To contact you in relation to your order or in response to your enquiries.
- To personalise and improve the quality of our services.
- To comply with our legal and regulatory requirements.
Retention of Personal Data
We keep your personal data for only as long as necessary for the purposes outlined in this Policy:
- Order and transaction data is retained for up to seven years to comply with legal and tax obligations.
- Contact details and correspondence are normally retained for up to two years after your last order or contact, unless we need to retain it longer to resolve disputes or enforce our agreements.
- Technical and analytics data retained by third-party processors is subject to their retention policies, in line with legal requirements.
Data Processors and Sharing Your Information
To provide our services efficiently, we may share your personal data with selected service providers acting as data processors on our behalf. These include:
- Payment Processors: For secure handling of card payments and transaction security.
- Delivery Partners: For delivering flowers and related products to you or your designated recipient.
- IT and Website Hosting Providers: For operating and maintaining our ordering systems and website.
- Professional Advisors: For audit, legal, and accounting purposes.
All processors are contractually obliged to protect your personal data in accordance with data protection laws and only act on our instructions.
International Transfers
Your personal data is primarily processed in the UK. Should any data be transferred outside the UK or the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as contractual data protection clauses or other measures specified by law, to maintain the security and integrity of your data.
Your Data Protection Rights
Under the GDPR, you have a number of rights regarding your personal data. These rights include:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of any inaccurate or incomplete data.
- Right to Erasure: In certain circumstances, you can request deletion of your personal data.
- Right to Restriction: You can ask us to restrict the processing of your personal data in specific situations.
- Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to processing based on our legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time.
If you wish to exercise any of these rights, please contact us using the details provided in our contact section on our website or in-store. Please note that some rights are subject to conditions and we may need to verify your identity.
Security of Your Data
We are committed to ensuring the security of your personal data. Appropriate organisational and technical measures are implemented to protect against unauthorised access, disclosure, or accidental loss of your information. Access to your personal data is restricted to employees, agents, and processors who have a legitimate business need to know and who are bound by strict confidentiality obligations.
Updates to Our Privacy Policy
Flowers Barnes may update this Privacy Policy from time to time to reflect changes in legislation or our business practices. Updated policies will be made available on our website and in store, with a clearly indicated revision date. We encourage you to review this Policy regularly to stay informed of how we protect your data.
Contacting Us
If you have any questions about this Privacy Policy or how we handle your personal data, please refer to the contact section on our website or visit our store in the Barnes area. You have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your rights have been infringed.
This Policy was last reviewed and updated in June 2024.