Flowers Holborn Privacy Policy

Introduction

At Flowers Holborn, we are committed to safeguarding the privacy of our customers in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, retain, and safeguard personal data when you place orders with Flowers Holborn from Holborn and its surrounding districts. Please read this policy carefully for a clear understanding of our practices regarding your personal information and the choices you have as a data subject.

Scope of This Policy

This Privacy Policy applies to all personal information collected and processed by Flowers Holborn in connection with orders placed by customers located in Holborn and the surrounding districts. By placing an order with us, you acknowledge that you have read and understood this policy, and consent to its terms where consent is required.

Personal Data We Collect

When you interact with Flowers Holborn and place an order, we may collect, store, and use the following types of personal data:

• Identity Data: Name, title, and contact details including address and telephone number.
• Order Details: Information about the products you order, delivery recipient details, and personalized messages (if any).
• Payment Information: Payment card details and billing addresses (handled securely through payment processors).
• Communication Data: Records of correspondence with us, including enquiries, complaints, and feedback.
• Technical Data: Device information, IP address, browser type, and website usage data automatically collected when using our website or app.

We do not knowingly collect data from children under the age of 16. If you believe we may have collected such data, please notify us promptly.

Lawful Bases for Processing

We process personal data in accordance with the lawful bases outlined in the GDPR. The specific legal bases applicable to our collection and use of your data include:

• Performance of a Contract: To process and deliver your orders and fulfill our contractual obligations.
• Compliance with Legal Obligations: To meet requirements of applicable laws, such as tax or accounting regulations.
• Legitimate Interests: For business operations, such as record keeping, improving our products and services, and fraud prevention, where these interests are not overridden by your rights.
• Consent: Where required, such as for direct marketing communications, we will obtain your consent before using your data for these purposes. You may withdraw your consent at any time.

How We Use Your Information

Your personal information is used for the following purposes:

• Processing and fulfilling your orders, including communicating with you about order status and delivery.
• Personalizing your experience as a customer.
• Managing payments and preventing fraud.
• Responding to your enquiries, feedback, or complaints.
• Conducting research and analysis to improve our products and services.
• Complying with our legal and regulatory obligations.

How We Share and Disclose Personal Data

We may share your personal data with selected third parties only when necessary and in accordance with GDPR requirements. Categories of recipients include:

• Payment Processors: Securely process your transactions on our behalf.
• Delivery Partners: Such as couriers or postal services, to complete delivery of products to the intended recipient.
• Technical Service Providers: Such as IT support or cloud service providers involved in the operation of our website and systems.
• Professional Advisers: Including accountants and legal advisers, as required for our business operations.
• Legal or Regulatory Authorities: If required by law or to protect our rights and property or the safety of others.

All processors and partners are required to adhere to applicable data protection laws and may only process data in accordance with our instructions.

Retention of Your Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with our legal obligations. The specific retention periods depend on the type of data and the purpose of processing but generally include:

• Order Information: Retained for up to 7 years for accounting and tax compliance purposes.
• Communication Records: Retained for as long as necessary to resolve any queries, complaints, or claims, usually up to 3 years.
• Marketing Data: Retained until you withdraw your consent or opt-out of communications.

Once data is no longer required, it will be securely deleted or anonymised so that it can no longer be associated with you.

Your Rights as a Data Subject

Under the GDPR, you have several rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You may ask us to delete your data, subject to certain legal exceptions.
• Right to Restrict Processing: You may request us to limit our use of your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another provider.
• Right to Object: You may object to our processing of your data based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, please contact us using the details provided on our website or in your order confirmation documents. We will respond to your request promptly and in accordance with applicable law.

Data Security

We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data. These measures are designed to prevent unauthorized access, accidental loss, destruction, or damage. Although we strive to maintain the highest level of data security, no internet-based service can guarantee complete security.

International Data Transfers

Your personal information is primarily processed within the United Kingdom. If any data is transferred or processed outside the UK or European Economic Area by our service providers, we ensure that appropriate safeguards are in place, including approved standard contractual clauses or other mechanisms as required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal obligations or our business practices. Any significant changes will be notified to you, where appropriate. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us through the channels provided on our website or in your purchase communications.

Thank you for choosing Flowers Holborn. Your trust and privacy are important to us.