Privacy Policy for Flowers Ruislip Orders
Introduction
This Privacy Policy details how Flowers Ruislip collects, uses, and protects your personal data, in line with the General Data Protection Regulation (GDPR). It applies to all customers and individuals placing orders with Flowers Ruislip from Ruislip and the surrounding districts. By using our services or placing an order, you acknowledge the collection and use of your personal information as described in this policy.
What Personal Data We Collect
Flowers Ruislip collects the following types of personal data from customers, depending on how you interact with us and the specific order details provided:
- Contact Information: Your name, delivery address, billing address, and contact preferences.
- Order Details: The flowers and products you purchase, delivery instructions, and messages for recipients.
- Recipient Information: Name and delivery address of the recipient (if different from you).
- Payment Information: Transaction details (e.g. payment confirmation), but not complete card data – this is processed securely by third-party processors.
- Communications: Any correspondence you have with us via phone, post, or digital channels, including feedback and queries.
- Technical Data: Information about your device, browser, IP address, and usage statistics if you interact with our website or digital ordering systems.
Lawful Bases for Processing
We only process your personal data where we have a valid legal basis to do so. The typical lawful bases for Flowers Ruislip’s processing are as follows:
- Contractual Necessity: To process your order, deliver products, and provide customer support as part of our contractual relationship.
- Legal Obligations: To comply with requirements in tax, accounting, and other applicable laws.
- Legitimate Interests: To improve our products and services, carry out analytics, prevent fraud, and respond to your enquiries in a way you would reasonably expect. We balance these interests with your rights and freedoms.
- Consent: Where required, we will request your explicit consent before sending marketing materials or processing personal data outside of what is necessary to complete your transaction.
How We Use Your Data
Your data is used for specific purposes, such as:
- Fulfilling your order and delivering flowers or products as requested.
- Communicating with you about your order, scheduling deliveries, and resolving issues.
- Processing payments through secure third-party services.
- Responding to questions, feedback, or complaints.
- Complying with our legal and regulatory obligations.
- Improving our offerings based on aggregated and anonymised analytics.
Data Sharing and Processors
We only share your personal data with parties necessary for the operation of our services, and we ensure any third-party providers adhere to GDPR standards. The main types of processors and recipients include:
- Payment Processors: Secure, reputable third-party providers process customer payments and may require limited access to your payment data.
- Delivery Partners: Couriers or delivery drivers responsible for bringing your order to you or your recipient.
- IT and System Providers: Companies hosting, supporting, or maintaining our website or order management systems.
We do not sell, rent, or trade your personal information for marketing or other purposes. Where we use processors outside of the UK or EEA, appropriate safeguards are in place to ensure your data’s protection.
Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, including for satisfying any legal, regulatory, accounting, or reporting requirements. Typically, order and transaction data is retained for up to 7 years in line with UK tax laws. Contact details and correspondence may be stored for a shorter or longer period, depending on the nature of our interaction and your preferences.
When personal data is no longer required, it is securely deleted or anonymised.
Your Rights
As a data subject under GDPR, you have the following rights regarding your personal data held by Flowers Ruislip:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Ask us to correct incomplete or inaccurate data.
- Right to Erasure: Request deletion of your data where appropriate (also known as the "right to be forgotten").
- Right to Restrict Processing: Ask us to pause processing under certain conditions.
- Right to Data Portability: Request transfer of your data to you or another organisation.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
If you wish to exercise any of these rights, please contact us with details of your request so we can assist you promptly. We may require additional information to verify your identity before completing your request.
Policy Updates and Contact
This policy may be updated from time to time to reflect changes to our services or legal obligations. The latest version will always be available to current and prospective customers prior to placing an order. Please review this policy periodically for updates.
If you have questions about this policy, your rights, or how Flowers Ruislip handles your personal information, please get in touch with us through our available contact methods.
Applicability
This Privacy Policy applies to all customers and order recipients in Ruislip and surrounding districts who place orders with Flowers Ruislip. By using our services, you agree to the practices described herein and acknowledge your rights under GDPR.