Flowers Upton Park Privacy Policy

Our Commitment to Your Privacy

Flowers Upton Park is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information in accordance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Flowers Upton Park within Upton Park and neighboring districts.

What Personal Data We Collect

When you place an order with Flowers Upton Park, we may collect and process the following categories of personal data:

• Identity Data: This may include your name and, if relevant, the name of the recipient.
• Contact Data: Such as address (billing, delivery), postal code, and any contact details you provide (excluding phone numbers, email addresses, or messaging handles where not collected).
• Order Data: Details of the items you order, delivery instructions, card messages, and specific preferences.
• Payment Data: Partial payment data required to process your transaction. We do not store full credit/debit card details after payment is completed, relying on secure payment processors.
• Technical Data: Information about how you interact with our website (e.g. IP address, device type, browser), which is used for security, analytics, and service improvement.

Lawful Basis for Processing Your Data

We process your personal data only when it is lawful to do so, and only for specific, necessary purposes. The primary lawful bases under GDPR that apply to our processing include:

• Contractual Necessity: Processing your data to fulfill your order, arrange delivery, and provide associated customer service.
• Legal Obligation: Complying with laws, VAT/tax regulations, and retaining certain information for statutory accounting requirements.
• Legitimate Interest: Using your information to enhance our services, prevent fraud, or send important service updates (never direct marketing without explicit consent).
• Consent: In circumstances where we are required to obtain your explicit consent (such as for marketing communications), we do so separately and transparently.

How We Use Your Data

Your data is used strictly for providing and improving our services, with key uses including:

• Processing and delivering flower orders accurately and on time.
• Handling payments securely via trusted payment processors.
• Providing customer support and responding to inquiries about your orders.
• Improving our website and service based on user interactions and preferences, through analytics.
• Complying with regulatory or legal obligations.

Data Retention Policy

Flowers Upton Park retains your personal data only for as long as it is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order and transaction data are retained for a period consistent with statutory obligations (usually up to seven years for accounting and tax records). Other data is reviewed periodically and deleted or anonymized when it is no longer required for our legitimate business purposes.

Processors and Third Parties

We use trusted third-party service providers (known as data processors) solely to facilitate the delivery of our services. This may include:

• Payment Processors: For handling payments securely; these providers are fully PCI-DSS compliant.
• IT Infrastructure Providers: Hosting and maintaining our website and operational systems.
• Delivery Couriers: For fulfilling the delivery of your flower orders to Upton Park and the surrounding districts.
• Analytics Service Providers: To understand and improve user experience.

All processors are contractually obliged to safeguard your information and only to act on our instructions. We never sell or rent your personal data to third parties. Should data ever be transferred outside the UK or EEA, we take steps to ensure that safeguards are implemented to protect your privacy rights.

Your Rights Under GDPR

Under GDPR, you have several important rights with respect to your personal data. These include:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data where no longer required or when consent is withdrawn.
• Right to Restriction: Limit how we process your information under certain circumstances.
• Right to Object: Object to certain types of processing, such as direct marketing.
• Right to Data Portability: Request that data you have provided be transferred to another service provider in a structured format.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw this at any time.
• Right to Lodge a Complaint: You are entitled to make a complaint to the Information Commissioner’s Office (ICO) if you are dissatisfied with how we manage your personal information.

Policy Scope and Updates

This Privacy Policy applies to all customers who place orders with Flowers Upton Park, whether directly or via our website, in Upton Park and surrounding districts. We reserve the right to update this Policy from time to time, to comply with legislation or reflect changes in our operations. We encourage you to review this page periodically for the latest information on our privacy practices. Continued use of our services implies acceptance of any updates to this policy.

Contacting Us About Data Privacy

If you wish to exercise any of your rights, have questions about our Privacy Policy, or require further information about our data protection practices, please refer to the official Flowers Upton Park contact channels stated on our website or written communications. Our team will respond to inquiries promptly and within statutory timescales.