Flowers Wembley Privacy Policy Overview

Introduction

At Flowers Wembley, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). This policy is applicable to all customers placing orders with Flowers Wembley from Wembley and the surrounding districts. By using our services, you acknowledge and agree to the practices described in this policy.

What Data We Collect

To provide our services effectively, we may collect and process the following types of personal data:

  • Identity Data: Includes your name, date of birth (if required for age verification).
  • Contact Data: Includes your delivery address, billing address, delivery instructions, and contact information such as your phone number (for delivery updates) where applicable.
  • Order and Transaction Data: Includes details about the products and services you have purchased from us, payment details (processed securely via third-party payment processors), order history, and delivery information.
  • Communication Data: Includes correspondence via our website forms or customer service.
  • Technical Data: Includes device information, browser type, IP address, date and time of visits, and cookies information relating to your use of our website.

We do not collect or process special categories of personal data (such as data relating to health, race, or religion) unless required by law and with your explicit consent.

Lawful Basis for Processing

Under GDPR, we must have a valid legal basis for processing your personal data. These include, but are not limited to:

  • Performance of Contract: We process your personal data as necessary to fulfill and manage your orders, deliver products, process payments, and provide customer service.
  • Legal Obligations: We may process your data to comply with applicable laws, regulations, or tax requirements.
  • Legitimate Interests: We may use your information for our legitimate business interests such as improving our services, fraud prevention, and maintaining security, provided that such interests are not overridden by your rights.
  • Consent: Where applicable, we rely on your consent to process your data, for example, sending marketing material. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used to:

  • Process and deliver your orders efficiently and accurately.
  • Communicate with you regarding your orders and provide customer support.
  • Improve our website, products, and customer experience.
  • Detect and prevent fraudulent transactions, and ensure the security of our services.
  • Comply with our legal and regulatory obligations.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain customer order data for up to six years following a completed transaction to comply with tax and contractual obligations. Data used for communications and marketing will be kept until you opt out or withdraw your consent.

Processors and Data Sharing

Flowers Wembley may engage select third-party processors to help deliver our services. These may include:

  • Payment processors (for handling secure payments by card or other means)
  • IT and website hosting providers
  • Delivery and logistics partners

We require all processors to respect the security of your personal data and to treat it in accordance with the law. They are not allowed to use your personal data for their own purposes and are only permitted to process your data for specified purposes and in accordance with our instructions.

We do not sell or rent your personal data to any third parties. We may disclose your information if required by law or to enforce our contractual agreements or to protect our rights, property, or safety.

Your Rights

As a data subject under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the data we hold about you.
  • Right to Rectification: You can request corrections of any inaccurate or incomplete information.
  • Right to Erasure: You can request the deletion of your personal data where there is no good reason for us to continue processing it.
  • Right to Restrict Processing: You may request us to suspend processing your personal data in certain circumstances.
  • Right to Object: You can object to our processing of your data for direct marketing purposes or where we rely on legitimate interest.
  • Right to Data Portability: You can request us to transfer your data to you or another service provider.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time.

Data Security

We implement suitable technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction. This includes encryption, secure hosting environments, and access controls. While we strive to protect your data, please be aware that no transmission over the Internet can be guaranteed as completely secure.

International Data Transfers

Your personal data is generally processed within the United Kingdom or the European Economic Area (EEA). If we engage processors outside the EEA, we will ensure that appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are in place to protect your data to equivalent standards as required under UK and EU law.

Updates to This Policy

We may update our Privacy Policy from time to time to reflect changes to our practices or legal requirements. We encourage you to review this document periodically to remain informed about how we protect your information.

Contacting Us

If you have questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us using the contact details provided on our website. We are committed to responding promptly to your enquiry and addressing any concerns you may have about your privacy.