Flowers Guildford Privacy Policy

Introduction to Our Privacy Policy

This Privacy Policy outlines how Flowers Guildford (“we,” “our,” or “us”) collects, processes, stores, and protects the personal data of individuals placing orders with Flowers Guildford from Guildford and the surrounding districts. We are fully committed to upholding the principles of the General Data Protection Regulation (GDPR) and safeguarding your privacy. Please read this policy carefully to understand how we handle your information and your rights regarding your personal data.

Scope of This Privacy Policy

This Privacy Policy applies to all customers who place orders for products or services with Flowers Guildford, whether via our website, by phone, or in person, from Guildford and the surrounding districts. By using our services, you acknowledge that you have read and understood the terms of this Privacy Policy.

What Personal Data We Collect

In order to process your orders and provide you with our services, we may collect and process the following categories of personal data:

• Contact Information: Including your name, billing address, delivery address, and telephone number.
• Order Details: Details of the products or services you have purchased or enquired about, delivery instructions, and messages for recipients.
• Payment Details: Payment card information or other payment method details (note: sensitive payment data is handled securely by authorized payment processors and not stored by us).
• Account Information: If you create an account, we collect a username, password, and login activity.
• Communication Data: Records of correspondence with us, including customer service queries and feedback.
• Technical Data: Your IP address, browser type and version, time zone setting, and other technology identifying information collected through our website.

Lawful Basis for Processing

We process your personal data based on at least one of the following lawful bases as defined in Article 6 of GDPR:

• Contractual Necessity: Processing is necessary to fulfill your order(s) and provide you with associated customer services.
• Legal Obligation: Where processing is required to comply with applicable laws, such as tax or accounting obligations.
• Legitimate Interests: To operate and improve our business, such as for customer service or fraud prevention, provided your rights and interests do not override these purposes.
• Consent: Where you have provided clear and explicit consent for a specific purpose, such as receiving marketing communications (which you may withdraw at any time).

How We Use Your Data

Your data is used strictly for the following purposes:

• Processing and fulfilling orders, including payment processing and arranging delivery.
• Managing your account and providing customer support.
• Communicating with you about your orders or responding to your enquiries.
• Improving our services and website functionality.
• Sending you marketing and promotional materials, if you have given your consent.
• Complying with our legal and regulatory obligations.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Specifically:

• Order and transaction data is typically retained for a period of up to seven years, in accordance with tax and accounting rules.
• Contact and account data will be retained for as long as your account is active or as needed to provide our services.
• Data used for marketing purposes will be retained until you withdraw your consent or unsubscribe.

When data is no longer needed, it will be securely deleted or anonymized.

Data Processors and Sharing

We may engage trusted third-party service providers (“processors”) to assist us in operating our business and providing services to you. Examples include payment processing companies, delivery couriers, IT hosting providers, and customer relationship management platforms. These processors are contractually obliged to process your data only on our instructions, using appropriate technical and organizational measures to protect your data.

Your personal data is not sold or disclosed to unrelated third parties except as required by law or with your explicit consent. Where transfers outside the UK or European Economic Area occur, we ensure adequate safeguards are in place in accordance with GDPR requirements.

Your Rights Under GDPR

You have specific rights in relation to your personal data under GDPR. These include:

• Right to Access: Request confirmation as to whether we process your personal data, and access to that data.
• Right to Rectification: Request corrections to any inaccurate or incomplete data we hold about you.
• Right to Erasure: Request that we delete your personal data when it is no longer necessary or when you have withdrawn consent (where applicable), subject to any legal obligations we must fulfill.
• Right to Restrict Processing: Request a temporary stop to processing your data under certain circumstances.
• Right to Data Portability: Request the transfer of your data to another organization, where technically feasible.
• Right to Object: Object to processing based on our legitimate interests, or to direct marketing at any time.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact details provided at the end of this policy.

How We Protect Your Data

We are committed to securing your data by using appropriate technical and organizational measures to prevent unauthorized access, loss, misuse, or alteration of your personal information. These measures include secure servers, encryption, and restricted access controls.

Changes to This Privacy Policy

We may review and amend this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or the services we offer. The latest version of the policy will always be available on our website. We encourage you to review it regularly to stay informed about how we protect your information.

Contact Us

If you have any questions regarding this Privacy Policy, your rights as outlined above, or how we handle your personal data, please contact our customer service team. We will address your request promptly and in accordance with applicable data protection laws.