Flowers Grays Privacy Policy

Introduction

At Flowers Grays, we are committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with Flowers Grays from Grays and the surrounding districts.

1. Data We Collect

When you place an order with Flowers Grays, we collect only the personal data necessary to fulfil your order and provide our services effectively. The categories of data we typically collect include:

• Contact Information: Your name, address, telephone number, and, where provided, alternative delivery addresses.
• Order Details: Information about the products or services you order, including delivery dates and preferences.
• Payment Information: Payment method and transaction details. We do not store full credit or debit card details ourselves; these are processed securely by our approved payment processor.
• Communication Records: Details of correspondence and customer service communications with us (such as order confirmations or special requests).
• Website Usage Data: Like many businesses, we may collect anonymised website analytics data (such as page visits and general usage statistics), but this information does not identify you personally.

2. Lawful Basis for Processing

Flowers Grays processes personal data in line with GDPR requirements and only where we have a valid lawful basis, as follows:

• Contractual Necessity: Most customer data is processed to perform the contract when you place an order (to fulfil, deliver, and manage your purchase).
• Legal Obligations: We may need to retain certain information for tax, accounting, or other statutory reasons.
• Legitimate Interests: We process data for certain legitimate business purposes, such as improving our services, handling customer enquiries, record-keeping, and ensuring the security of our operations. These interests are balanced against your data rights.
• Consent: For any marketing communications (such as newsletters or promotions), we will seek your explicit consent, which you may withdraw at any time.

3. How We Use Your Data

Your data is used for the following purposes:

• To process, confirm, and deliver your orders for flowers and related products or services.
• To communicate with you regarding your order, queries, or complaints.
• To improve our services, including monitoring website performance and customer service.
• To comply with any applicable laws or regulatory obligations.
• If you have agreed, to send you marketing messages or information about special offers.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Generally, order and account records are kept for up to seven years in compliance with tax and accounting regulations. When data is no longer required, it is securely deleted or anonymised.

5. Data Processors

To deliver our services, we may use trusted third-party processors who assist us with functions such as payment processing, deliveries, website hosting, or technical support. These parties will only access your data as necessary to perform their functions and are contractually required to safeguard your information in line with GDPR standards.

We do not sell or share your personal data for marketing purposes with third parties outside of Flowers Grays. Any third-party service providers used are carefully vetted for GDPR compliance.

6. Data Security

Flowers Grays implements robust technical and organisational measures to keep your data secure. This includes restricted access to records, data encryption where appropriate, and regular security reviews of our systems. If, despite these efforts, a data breach should occur, we will inform affected individuals and authorities where required by law.

7. Your Rights Under GDPR

Under GDPR, you have several rights in relation to your personal data held by Flowers Grays:

• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Correct incomplete or inaccurate information.
• Right to Erasure: Request deletion of your data where there is no legal basis for continued retention.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a format that allows you to transfer it elsewhere.
• Right to Object: Object to processing where we rely on our legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Withdraw consent for marketing or other processes relying on consent at any time.

To exercise any of these rights, or if you have queries about how your data is managed, please contact us using the details provided on our website or visit us in-store.

8. Policy Coverage and Updates

This Privacy Policy applies to all customers placing Flowers Grays orders from Grays and the surrounding districts, whether you order via our website, in person, or by telephone. We may update this policy from time to time to reflect changes in law or our business operations; any changes will be posted here, and, where appropriate, communicated to you directly.

Contact and Queries

If you require more information about this policy, your data, or have any concerns, please contact us through the options found on our website or by visiting our store. We also encourage you to reach out if you wish to exercise your data rights or have any questions about how we use your data.

Thank you for trusting Flowers Grays. We value your privacy and strive to keep your personal information safe and secure at all times.