Privacy Policy for Flowers Berkhamsted Orders

Scope of This Privacy Policy

This Privacy Policy describes how Flowers Berkhamsted collects, processes, and protects your personal data in compliance with the UK General Data Protection Regulation (GDPR). It applies to all customers who place orders with Flowers Berkhamsted from Berkhamsted and its surrounding districts. We are committed to handling your data responsibly and transparently, ensuring your privacy rights are respected at every step of your interaction with us.

What Data We Collect

When you place an order with Flowers Berkhamsted or interact with our services, we may collect the following categories of personal data:

• Contact Information: Name, delivery address, and, if provided, contact number (for order delivery and communication purposes).
• Order Details: Information about the products you have ordered, any special instructions, recipient information, and delivery preferences.
• Payment Information: Transaction details (such as payment amount and payment method details). Please note that payment card details are processed through secure third-party payment processors and not stored by us.
• Correspondence: Records of communication between you and our customer service (e.g., order queries or feedback).
• Technical Data: Information such as your device type, IP address, and browser used for analytics and website security purposes.

Lawful Basis for Processing

Flowers Berkhamsted only processes your personal data where we have a legal basis to do so under GDPR. These bases include:

• Contractual necessity: To process your order and fulfill our obligations to you when you purchase from us.
• Legal obligation: To comply with applicable laws or regulations (e.g., for tax or accounting purposes).
• Legitimate interests: To improve our services, manage business operations, and ensure security. We carefully consider and balance any potential impact on your rights before processing on this basis.
• Consent: Where required, we will request your consent for specific uses of your data, such as sending marketing messages. You can withdraw your consent at any time.

How We Store and Retain Your Data

Your personal data is stored securely, in accordance with industry best practices and legal requirements, to protect against loss, unauthorized access, or misuse. We only retain your data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

Specifically:

• Order and transaction data are generally retained for up to seven years to comply with our legal obligations.
• Personal data associated with routine customer enquiries not leading to an order may be retained for up to two years.
• Where consent is the basis for data processing (e.g., marketing), your data will be retained until you withdraw your consent or opt-out.

Who Processes Your Data (Processors)

Flowers Berkhamsted sometimes uses third-party service providers to facilitate specific functions as part of our business operations. These may include:

• Payment processors for handling payment transactions securely.
• Delivery partners for providing efficient order fulfillment and delivery services.
• IT service providers for website hosting, data storage, and security.
• Professional advisors such as accountants or legal consultants, where necessary for compliance and business management.

All third-party processors engaged by Flowers Berkhamsted are required to handle your data in accordance with data protection laws and are subject to strict contractual obligations relating to data confidentiality and security. Data is not transferred outside of the UK or European Economic Area (EEA) without adequate safeguards in place.

Your Rights Under GDPR

As a customer of Flowers Berkhamsted, GDPR affords you a range of rights regarding the personal data we hold about you:

• Right to access: You may request confirmation of whether we are processing your personal data and obtain a copy of that data.
• Right to rectification: You have the right to have inaccurate or incomplete personal data corrected.
• Right to erasure: Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances (e.g., when it is no longer necessary for the purpose for which it was collected).
• Right to object: You may object to processing of your data on legitimate interest grounds, or to receiving marketing communications.
• Right to restriction: You can ask us to pause or limit the processing of your personal data.
• Right to data portability: Where applicable, you can request the transfer of your data to you or another service provider in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where we process your data based on consent, you have the right to withdraw that consent at any time.

If you wish to exercise any of your rights, please contact us using the appropriate contact method provided on our website or written communication channels. We may request additional information from you to verify your identity before processing your request.

Security Measures

Protecting your personal data is of utmost importance to us. We use a combination of technical, organizational, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or loss. Access to personal data is strictly controlled and limited only to employees or processors who require it for the purposes outlined above.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any significant changes will be communicated clearly through our official channels. We encourage you to review this policy on a regular basis to remain informed of how we protect your data.

Contact and Complaints

If you have any concerns or questions regarding the processing of your personal data, or if you would like to lodge a complaint, please refer to the contact information provided on our website. If you are dissatisfied with our handling of your data, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

Flowers Berkhamsted is committed to safeguarding your privacy and ensuring your trust in all your interactions with us. Thank you for choosing us for your floral needs.