Flowers Cheshunt Privacy Policy

Introduction to Our Privacy Policy

This Privacy Policy explains how Flowers Cheshunt collects, uses, retains, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders for flowers with Flowers Cheshunt from Cheshunt and surrounding districts. Our commitment is to treat your personal data with respect, confidentiality, and transparency.

What Personal Data We Collect

To provide you with our floral products and services, Flowers Cheshunt collects a range of personal data, which may include:

• Contact details: Such as your name, postal address, delivery address, and telephone number.
• Order information: Details about the products and services you purchase or express an interest in.
• Payment details: Transaction and payment method information (note: we do not store full card details).
• Correspondence: Communications you have with us, including customer service inquiries and feedback.
• Technical data: Information collected through your interaction with our website, such as IP address, browser type, and usage data for improving our website and services.

We only collect information necessary for processing your order, fulfilling our contractual obligations, and providing you with high-quality customer service.

The Lawful Basis for Processing Your Data

Under the GDPR, Flowers Cheshunt must have a lawful basis to process your personal data. We rely on the following grounds:

• Contractual necessity: We process your information as it is necessary to fulfill your order, deliver products, and manage payments.
• Legal obligation: We may process some data to comply with financial, tax, or legal obligations.
• Legitimate interests: We may process limited data for purposes such as improving our services, ensuring network security, or handling customer inquiries, where such interests are not overridden by your data protection rights.
• Consent: In specific circumstances, such as marketing communications, we will only process your data with your explicit consent. You may withdraw this consent at any time.

How We Use Your Personal Information

Your personal information is used to:

• Process your orders and deliver flowers and gifts to your chosen recipient.
• Communicate with you regarding your order status, customer queries, or support requests.
• Handle payments and apply refunds where necessary.
• Meet legal and regulatory requirements.
• Enhance our products, services, and customer experience.
• If you have given consent, to inform you about promotions and offers relevant to your interests.

Data Retention: How Long We Keep Your Information

Flowers Cheshunt retains your personal data only for as long as it is necessary for the purposes outlined in this policy. We adhere to the following general retention periods:

• Order and payment data: Retained for up to 7 years to comply with accounting and tax laws.
• Marketing data: If you have consented to receive marketing, your data will be retained until you withdraw consent or request erasure.
• Customer service correspondence: Kept for up to 2 years for service improvement and resolving queries.

Upon expiration of these periods, your data is securely deleted or anonymised. If you wish your data to be erased earlier, please refer to your rights below.

Sharing and Processing Your Data: Trusted Processors

Flowers Cheshunt shares personal information only with trusted third-party service providers (data processors) as necessary to fulfil services, including:

• Payment processors for secure transactions.
• Delivery companies for dispatch and tracking of orders.
• IT and website hosting companies for managing and improving our online platform.
• Professional advisors (e.g., accountants) for compliance and legal purposes.

All processors are contractually obliged to safeguard your information and process it in compliance with GDPR, ensuring it is not used for their own purposes or shared further without consent.

Flowers Cheshunt does not sell or rent your personal data to third parties. We may be required to disclose information in unusual circumstances, such as a legal requirement by law enforcement agencies, only where legally permitted or required.

User Rights Under GDPR

As a Flowers Cheshunt customer within Cheshunt and the surrounding areas, you have certain rights concerning your personal data:

• The right to access: Obtain a copy of your personal data and information about how we process it.
• The right to rectification: Have incomplete, inaccurate, or outdated information corrected.
• The right to erasure: Request deletion of your personal data where there is no longer a lawful basis for us to continue processing it.
• The right to object: Object to processing carried out on the grounds of legitimate interest or for direct marketing purposes.
• The right to restrict processing: Request restrictions on how we use your data in certain circumstances.
• The right to data portability: Receive your data in a portable format and transfer it to another provider, where technically feasible.
• The right to withdraw consent: Withdraw your consent at any time when data is processed solely on this basis.

To exercise your rights, please contact us through the methods provided on our website. We may require you to verify your identity before progressing your request, and will respond within one month as required by law.

Security Measures

We use appropriate technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These include secure server technology, access controls, regular staff training, and periodic policy reviews.

Updates to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in law, regulatory guidance, or our services. The latest version will always be available on our website, with the effective date noted at the top of the document.

Contact and Concerns

If you have any questions or concerns about this Privacy Policy, your rights, or how we process your data, please reach out using the contact options set out on our website. If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Last updated: June 2024