How Flowers Yiewsley Handles Your Privacy in the Yiewsley Area

GDPR Privacy Policy for Customers of Flowers Yiewsley

Introduction

This Privacy Policy sets out how Flowers Yiewsley collects, uses, and safeguards personal information in accordance with the General Data Protection Regulation (GDPR). It applies to all individuals who place orders with Flowers Yiewsley from Yiewsley and the surrounding districts. We are committed to ensuring your information is treated with care, transparency, and respect.

Who We Are

Flowers Yiewsley is a florist business providing services to customers in Yiewsley and neighbouring districts. As a data controller, Flowers Yiewsley determines the purpose and means of processing your personal data when you order flowers, request services, or interact with our business in any way.

What Personal Data We Collect

When you place an order or interact with Flowers Yiewsley, we may collect the following types of personal data:

Contact Information: Name, address, phone number, and any delivery details you provide.
Order Information: Details of your order, any delivery instructions, preferences or special messages.
Payment Information: Payment transaction details (such as amount and payment method), though we do not store full card information ourselves; this is handled securely by our payment processors.
Communication Data: Any correspondence you may have with us, such as emails, messages, or notes from phone calls.
Technical Data: When you visit our website, we may collect technical data such as IP address, browser type, time zone settings, and cookies used to ensure website functionality and security.

Lawful Basis for Processing Data

Under the GDPR, we must have a lawful basis to process your data. We process your personal data based on the following grounds:

Contractual Necessity: Most data is collected and processed so we can fulfil the contract of providing goods and services at your request. Without this information, we cannot complete your order.
Legal Obligation: In some cases, we are required to process certain data to comply with applicable laws and regulations, such as financial record-keeping.
Legitimate Interest: We may process certain data for legitimate business reasons, such as responding to queries, ensuring our website security, improving our services, or preventing fraud, provided these interests are not overridden by your rights.
Consent: Where required, we will request your explicit consent for certain types of data processing, such as sending you marketing communications. You can withdraw your consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

To process, confirm, and deliver your order.
To communicate with you regarding your order or any queries you might have.
To improve our products, services, and customer experience.
For administrative, accounting, and record-keeping purposes.
To comply with any applicable laws or respond to legal requests or investigations.
If you have given consent, to provide you with information about our latest products or promotions.

Data Retention

Your personal data is only retained for as long as is necessary for the purposes listed above, in accordance with our legal obligations and legitimate business needs. Typically, we retain customer order details for up to six years to comply with financial regulations and resolve potential disputes. Personal information used only for marketing will be kept until you withdraw your consent or request removal.

Third-Party Processors

In order to deliver our services, we may share your information with carefully selected third-party data processors. These include:

Payment Providers: To process your payment securely, we use external payment processors. Card details are never stored by Flowers Yiewsley and are handled in accordance with stringent security standards.
Delivery Partners: For order delivery, limited necessary information such as your name, address, and contact number may be shared with our trusted delivery personnel.
IT and Website Providers: We use external providers for website hosting, maintenance, and communications to ensure continuous and secure operation of our business.

All third-party processors are vetted to ensure they handle data according to GDPR requirements and under our instructions. We do not sell or rent your personal information to any party under any circumstances.

Your Rights Under the GDPR

You have several rights in relation to your personal data processed by Flowers Yiewsley, including:

Right of Access: You may request confirmation and a copy of the personal data we hold about you.
Right to Rectification: You may request corrections to any inaccurate or incomplete personal data.
Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data.
Right to Restrict Processing: You may request restrictions in how we process your data, subject to legal and contractual limitations.
Right to Data Portability: You can ask for your data to be provided in a machine-readable format for transfer to another provider.
Right to Object: You have the right to object to processing where we rely on legitimate interests or direct marketing.
Right to Withdraw Consent: Where we process data based on your consent, you may withdraw it at any time without affecting the legality of processing before withdrawal.

All requests will be handled promptly and in accordance with applicable law. In some situations, certain statutory exemptions may apply. Proof of identity may be required.

Security of Your Information

We are committed to keeping your personal data safe. Flowers Yiewsley implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk. This includes physical, electronic, and managerial safeguards to protect against unauthorised access, disclosure, or loss of your data.

Policy Updates

Flowers Yiewsley reserves the right to update this Privacy Policy periodically to reflect legal requirements, best practices, or service changes. Significant updates will be communicated when required. We encourage customers to review this policy regularly for the latest information on how we handle and protect your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy or wish to exercise your rights under the GDPR, you may contact Flowers Yiewsley through our available customer channels. You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed.