Privacy Policy for Flowers Enfield Town Orders

Introduction

This Privacy Policy outlines how Flowers Enfield Town collects, processes, and protects the personal data of our customers who place orders from Enfield Town and the surrounding districts. Safeguarding your privacy is a top priority, and this document details your rights and our responsibilities under the General Data Protection Regulation (GDPR).

Scope of the Policy

This policy applies to all individuals who order flowers and related products from Flowers Enfield Town and its associated services, either online, via telephone, or in person, from Enfield Town or its adjacent districts. The policy ensures transparency about what personal data is collected, on what legal grounds we process the data, how long data is retained, with whom it is shared, and the rights afforded to customers under GDPR.

1. Data We Collect

To provide and improve our services, Flowers Enfield Town may collect the following categories of personal data:

  • Contact Information: Name, address (including delivery and billing addresses), and contact details such as phone numbers.
  • Order Details: Details of products ordered, delivery instructions, order histories, and preferences.
  • Payment Data: Payment card details (processed securely through payment providers; we do not store full card details), transaction identifiers, and billing information.
  • Communications: Correspondence with our customer service (e.g., feedback, complaints, service queries).
  • Website Usage Data: IP address, device type, browser type, cookies, and usage logs (collected when you visit our website for order placement or browsing).

2. Lawful Basis for Processing Personal Data

Flowers Enfield Town processes your personal data under the following GDPR-compliant legal bases:

  • Contractual Necessity: To fulfill and manage your orders, arrange delivery, and provide customer support.
  • Legitimate Interests: For improving our products and services, ensuring the security of our website, preventing fraud, and maintaining business records, provided your fundamental rights do not override these interests.
  • Consent: For sending marketing communications or newsletters (where you have specifically opted in). Consent can be withdrawn at any time.
  • Legal Obligation: To comply with laws and regulations (e.g., taxation, reporting requirements).

3. How We Use Your Information

We use your data to:

  • Process and fulfil your orders, including communicating about order status and delivery.
  • Handle payment transactions securely through payment processors.
  • Respond to your inquiries and provide customer support.
  • Analyze and improve our services and offerings.
  • Comply with legal obligations such as keeping financial and transaction records.
  • Send marketing updates and promotional materials if you have opted in.

4. Retention of Your Personal Data

Flowers Enfield Town will only retain your personal data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. In practice:

  • Order and Account Data: Retained for up to 7 years to comply with accounting and tax regulations.
  • Marketing Data: Retained until you withdraw consent or unsubscribe.
  • Technical and Usage Data: Kept for up to 2 years for analytics and security purposes, unless a longer retention period is required by law.

When data is no longer needed, it is securely deleted or anonymized.

5. Data Processors and Third Parties

Your personal data may be shared with certain third parties that act as data processors on our behalf. These entities are contractually obligated to process your data only as instructed, provide adequate safeguards, and maintain data confidentiality. Examples of such processors include:

  • Payment processing providers who handle transactions.
  • Delivery partners responsible for fulfilling flower deliveries to your designated addresses.
  • IT service providers supporting our website and order management systems.
  • Accountants and legal advisors, where required for compliance purposes.

We do not sell or rent your personal data to any third parties for unrelated marketing or commercial purposes. If transfer of data outside the European Economic Area (EEA) is necessary (such as through our IT providers), we ensure adequate protection through standard contractual clauses or equivalent safeguards.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: You can request a copy of your personal data that we hold.
  • Right to Rectification: You can request corrections of inaccurate or incomplete data.
  • Right to Erasure: You can ask for your personal data to be deleted when it is no longer necessary or if you withdraw consent.
  • Right to Restrict Processing: You can ask us to limit or suspend data processing under certain circumstances.
  • Right to Data Portability: You can request your data be provided to you in a structured, commonly used, machine-readable format.
  • Right to Object: You may object to processing where we rely on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw this at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the methods listed on our website.

7. Security Measures

Flowers Enfield Town employs industry-standard security measures to protect your personal data against unauthorized access, loss, or misuse. This includes secure data storage, encryption of sensitive information, access controls, and regular security audits.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technologies, or our business practices. The updated policy will always be made available in-store and via our website. Please review the policy periodically to stay informed about how your data is protected.

9. Contacting Us

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please use the contact forms or address information provided on our website or in our store. We are committed to protecting your privacy and will address your requests promptly.

This policy is effective as of 2024 and applies to all Flowers Enfield Town customers placing orders from Enfield Town and surrounding districts.