Flowers Tadworth Privacy Policy for Customers

Introduction

This Privacy Policy outlines how Flowers Tadworth collects, uses, retains, and processes your personal information when you place orders with us in Tadworth and surrounding districts. We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers who use our services in Tadworth and the neighbouring areas.

What Data We Collect

When you place an order or interact with Flowers Tadworth, we may collect the following categories of personal data:

  • Identity Information: Your full name and, where applicable, the recipient’s name.
  • Contact Information: Delivery address, billing address (if different), and phone number.
  • Order Details: Details about your purchase, such as the type of flowers, delivery instructions, preferences, and special requests.
  • Payment Information: Payment card details or third-party payment information, processed securely by our payment processors.
  • Communication Records: Any correspondence, feedback, or communication you send to us regarding your order or our services.
  • Technical Data: IP address, browser type, and device information collected through our website for security and analytics.

Lawful Basis for Processing Personal Data

Under GDPR, we must have a valid lawful basis for processing your personal data. Flowers Tadworth processes your personal information based on the following grounds:

  • Contractual Necessity: Processing is necessary for the performance of a contract, such as fulfilling your flower order, managing delivery, and providing customer service.
  • Legal Obligation: We may need to process certain data to comply with legal or regulatory requirements, for example, record-keeping for tax or accounting purposes.
  • Legitimate Interests: We may process your data to pursue our legitimate interests, such as improving our service or managing our business, provided this does not override your fundamental rights.
  • Consent: In cases where we rely on your consent (such as where required for certain types of marketing), you have the right to withdraw your consent at any time.

How We Use Your Data

Personal data collected from you is used for the following purposes:

  • To process and deliver your flower orders accurately and efficiently.
  • To communicate with you about your order, including order confirmation, delivery updates, and customer support.
  • To improve our products and services based on customer feedback and preferences.
  • To administer our website, safeguard against fraud, and maintain security.
  • To meet our legal obligations, including record keeping and financial reporting.
  • With your permission, to send you updates or promotional offers relevant to Flowers Tadworth.

Data Retention

Your personal data will be retained only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy. As a general principle:

  • Order and transaction records are kept for up to seven years to comply with accounting and legal requirements.
  • Customer support records are retained for up to two years following your last order.
  • Personal data used for marketing will be retained until you opt out or withdraw consent.
  • Technical and analytics data may be retained for up to 18 months for reporting and security analysis.

After these periods, your data will either be securely deleted or fully anonymised.

Data Processors and Data Sharing

Flowers Tadworth works with trusted third-party service providers (data processors) to fulfil some business functions. These may include:

  • Payment processing companies to handle secure transaction processing.
  • IT service providers to host and maintain our website and related systems.
  • Delivery partners for order fulfillment, where required.
  • Professional advisors (such as accountants or legal consultants) for legitimate business needs.

We require all data processors to act in accordance with this Privacy Policy, to implement appropriate security measures, and to process your data only as instructed by us. We do not sell or rent your personal data to third parties. Your data may be transferred outside the United Kingdom if our processors are located overseas, in which case we ensure that adequate protection is in place in accordance with GDPR requirements.

Your GDPR Rights

As a data subject under GDPR, you have rights over your personal data, including:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data where it is no longer needed, subject to legal obligations.
  • Right to Restrict Processing: Request that we restrict the processing of your personal data in certain circumstances.
  • Right to Data Portability: Request a copy of your data in a structured, commonly used electronic format.
  • Right to Object: Object to our processing of your personal data in specific cases, such as direct marketing.

If you wish to exercise any of these rights, or have questions regarding your data, please contact us using the details provided on our website or by post. Your request will be reviewed and responded to in accordance with GDPR timeframes.

Security of Your Data

We take appropriate technical and organisational measures to safeguard your personal data. These include encryption of sensitive information, regular security assessments, access controls, and staff training. Despite our efforts, no electronic transmission or storage system is completely secure. If we become aware of a data breach that affects your personal information, we will notify you as soon as reasonably possible, as required by law.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or privacy practices. The latest version will always be available on our website. Please check periodically for updates. Continued use of our services after changes have been published signifies your acceptance of those changes.

Contact Us

If you have any questions about this Privacy Policy, your data, or how Flowers Tadworth operates, please refer to our contact details on the website or get in touch by post. We are committed to responding promptly to all privacy-related queries or concerns.