Our GDPR-Compliant Privacy Policy

Introduction

This Privacy Policy outlines how Flowers Greenhithe (“we”, “us”, or “our”) collects, uses, and protects your personal information when you place orders with us as a customer located in Greenhithe or the surrounding districts. We are committed to safeguarding your privacy and complying fully with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Scope of this Policy

This policy applies to all individuals who place orders with Flowers Greenhithe for delivery to Greenhithe and the surrounding districts as well as anyone who interacts with us for inquiries, purchases, or after-sales support. By placing an order or contacting us, you accept the practices described in this policy.

Information We Collect

We collect both personal and non-personal data in order to process your orders, provide customer service, and improve our services. The types of personal data we may collect include:

• Identity Data: Name, and if provided, title.
• Contact Data: Delivery address, billing address, postcode, and (where necessary for specific delivery instructions) contact number.
• Order Data: Details about bouquets or floral arrangements ordered, recipient information, payment method (but not payment card details), and order history.
• Transactional Data: Details of payments made to and from you (processed through secure third-party payment processors).
• Communications Data: Communications sent to or received from you (for example, order confirmations, inquiries, complaints, and after-sales support).
• Technical Data: IP address, device type, browser type, and information about how you use our website (if you order online).

Lawful Basis for Processing Your Data

We only process personal data where there is a lawful basis to do so, including:

• Contractual necessity: To process and fulfill your orders, provide customer support, and perform our contractual obligations.
• Legal obligation: To comply with applicable laws, such as tax and accounting requirements.
• Legitimate interests: For internal purposes such as record-keeping, security, business analytics, and to improve our products and services. Whenever we rely on legitimate interests, we balance these with your rights and freedoms.
• Consent: In circumstances where we ask for your specific consent (for example, marketing communications), you are free to withdraw it at any time.

Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general:

• We retain order and transaction records for up to 7 years in line with tax and accounting laws.
• Contact details used for customer service purposes are kept for up to 2 years after your last interaction with us.
• Where we process data based on consent (such as marketing preferences), the information is retained until you withdraw your consent.
• After the retention period expires, we securely delete or anonymise your data.

Processors and Data Sharing

Your personal data may be processed by trusted third-party service providers who act on our behalf (“processors”). These may include:

• Payment processors: To securely process payments (we do not store your payment card details).
• IT and website hosting providers: For the safe storage and management of digital data.
• Couriers or delivery partners: To deliver flowers and gifts to your chosen recipients.

All processors are required to process personal data only as instructed by Flowers Greenhithe and in accordance with strict confidentiality and security measures as required by GDPR. We do not sell or rent your personal data to any third parties.

Your Data Protection Rights

Under the GDPR, you have certain rights regarding your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate information or update incomplete data.
• Right to Erasure: Under certain conditions, you can request deletion of your personal information.
• Right to Restriction: You can ask us to restrict processing of your data in specific circumstances.
• Right to Objection: You have the right to object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: In some scenarios, you can request we transfer your personal data to another service provider.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting prior processing.

If you wish to exercise any of these rights, or if you have questions about your data, you may contact us through our official communication channels or in writing at our place of business.

Data Security

We use practical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse. This includes secure storage of records, encryption where appropriate, and limiting employee access strictly to those who require it as part of their duties.

Automated Decision Making and Profiling

Flowers Greenhithe does not use your personal data to make automated decisions that have legal or significant effects on you, nor do we engage in profiling activities regarding our customers.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The latest version will always apply and will be made available to customers via our website or upon request.

Contact and Complaints

If you have concerns about how we handle your personal data, you can raise them directly with us. Should you feel we have not resolved your concern satisfactorily, you may also raise the matter with the UK’s Information Commissioner’s Office (ICO).

We value your trust and are committed to handling your data responsibly and transparently.