Privacy Policy for Customers of Flowers Brunswick Park

Introduction to Our Privacy Policy

Flowers Brunswick Park is committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you place an order with us, whether you reside in Brunswick Park or the neighbouring areas. By placing an order, you acknowledge that you have read and understood this policy.

Scope of the Policy

This Privacy Policy applies to all customers who order flowers or related products from Flowers Brunswick Park, whether through our website, over the phone, or in person, and who reside in Brunswick Park or the surrounding districts. The policy encompasses all data collected during the order process and related customer interactions.

What Personal Data We Collect

To fulfil your orders and provide a high standard of service, we collect and process various types of personal data. The data we typically collect includes:

• Full name
• Delivery address (including postcode, city, and district)
• Contact details (such as telephone number)
• Payment details (processed securely via third-party payment processors; we do not store payment card details)
• Order information (such as product(s) ordered, order value, delivery date and recipient’s name)
• Any special instructions or messages you wish to send with your order
• Occasionally, feedback or correspondence regarding your order or our services

Lawful Basis for Processing Your Data

Under GDPR, we are required to have a lawful basis for processing your personal data. For Flowers Brunswick Park customers, we rely on the following legal grounds:

• Contractual necessity: Processing your data is essential to fulfil your order and provide the requested service.
• Legitimate interests: We may process your data for the purposes of improving our services, managing customer queries, and conducting limited direct marketing, provided this does not override your rights.
• Consent: Where we wish to send you marketing materials or promotions unrelated to your order, we will obtain your explicit consent first (where required).
• Legal obligation: In some cases, we are required to process and retain your data to comply with UK tax regulations and other statutory requirements.

How We Use Your Data

Your personal data is used strictly for the purposes it was provided, which may include:

• Processing and delivering your flower order
• Contacting you in relation to your order or delivery
• Dealing with requests, queries, or complaints
• Retaining transaction records for statutory and accounting purposes
• Sending occasional service-related information or feedback requests

We do not sell or share your personal information with unrelated third parties for marketing purposes.

Retention of Your Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Typically, order and transaction information is kept for up to 7 years to comply with legal requirements. Once this period expires, your personal information will be securely deleted or anonymized.

Data Processors and Third Parties

In order to provide our services efficiently, we may share your data with trusted third-party service providers, known as 'processors', who act on our instructions. These may include:

• Payment processing companies to handle transactions
• IT and website hosting providers for data storage and order management
• Delivery and courier services for fulfilment of orders
• Professional advisers (such as accountants or auditors) where required by law

All processors are required by contract to protect your data in accordance with GDPR and are only allowed to process your data for the specific purposes we stipulate.

How We Protect Your Information

Flowers Brunswick Park implements robust technical and organisational measures to safeguard your personal data from unauthorised access, loss, misuse or disclosure. These include secure order forms, encrypted data transmission where appropriate, and strict internal protocols for data handling. Only staff and contractors who need access to your data for the fulfilment of their duties are granted access.

Your Rights Under GDPR

As a customer, you have several rights relating to your personal data, including:

• Right to be informed: You have the right to know how your data is collected and used.
• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: If your data is inaccurate or incomplete, you can ask us to correct or update it.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data when it is no longer necessary for the purposes collected, or if you withdraw your consent (where applicable).
• Right to restriction of processing: In certain circumstances, you can ask us to restrict the use of your data.
• Right to data portability: Where applicable, you may obtain and reuse your data for your own purposes across different services.
• Right to object: You can object to our processing of your data based on legitimate interests or for direct marketing.
• Right not to be subject to automated decision-making: We do not use your data for automated decisions that would significantly affect you.

If you wish to exercise any of these rights, or have questions regarding your personal information, please contact us using the methods described on our website or in your order confirmation.

Policy Updates

We may update this Privacy Policy from time to time to reflect legislative changes or improvements to our practices. Any changes will be posted on our website with an updated date. We encourage you to review this policy regularly to remain informed about how we protect your data.

Contact and Complaints

If you have concerns about how your data has been handled or wish to make a complaint, please contact us through the designated channels on our website. You also have the right to lodge a complaint with the UK’s Information Commissioner’s Office if you believe your data protection rights have been breached.