Flowers Purley Privacy Policy

Introduction

This Privacy Policy explains how Flowers Purley collects, uses, stores, and protects personal data received from customers placing orders in Purley and the surrounding districts. We are committed to safeguarding the privacy of all individuals who interact with our business, ensuring full compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. Please read this policy carefully to understand your rights and how we manage your data.

Scope of Policy

This policy applies to all customers making orders with Flowers Purley, whether online, by phone, or in person. By placing an order or interacting with us, you acknowledge the practices described here apply to your information.

What Data We Collect

We collect personal data necessary to fulfill your flower orders and provide a tailored experience. Depending on the nature of your interaction, this may include:

• Identification Data: Name, salutation, and, if applicable, recipient details.
• Contact Details: Delivery address, billing address, and contact information (such as telephone number).
• Order Information: Details of your order, delivery instructions, and gift card messages.
• Payment Information: Payment method, transaction reference (note: we do not store full bank card information).
• Communication Records: Correspondence with our team, such as order confirmation, complaints, or special requests.
• Technical Data: When you use our website, we may collect IP address, browser type, device identifiers, access times, and cookies for functional and analytical purposes.

Lawful Basis for Processing Your Data

Flowers Purley processes your personal data only where there is a valid legal ground under the GDPR. These may include:

• Contractual Necessity: Most data is processed to fulfill our contract with you—that is, to process and deliver your flower order, process payments, and handle related customer service queries.
• Legal Obligation: Certain information may be processed and retained to comply with applicable legal obligations, such as financial recordkeeping and regulatory reporting.
• Legitimate Interests: We may process limited personal data to pursue legitimate business interests, such as improving our services, managing requests, or ensuring security—where your interests and fundamental rights do not override these purposes.
• Consent: Where required, such as for direct marketing unrelated to your order, we will only process your data with your explicit consent. You may withdraw this consent at any time.

How We Use Your Data

Your personal information is used for the following purposes:

• Processing and fulfilling your flower orders
• Delivering flowers and gifts to the specified address
• Handling payments and refunds
• Communicating order status, confirmations, and customer service issues
• Improving and personalizing your experience
• Complying with legal and regulatory requirements
• Protecting against fraud or misuse of our services

Sharing and Data Processors

We respect your privacy and only share your information with trusted third-party service providers (“processors”) when necessary to provide and improve our service. These may include:

• Payment processors: Securely handling your payment information.
• Delivery partners: Ensuring successful and timely delivery to the recipient.
• IT and web service providers: Hosting, maintaining, and supporting our website and order management systems.
• Professional advisors: Such as accountants or legal consultants, for compliance and business operation.

We require all processors to respect the confidentiality, integrity, and security of your personal data and to treat it in accordance with the law. Your data is never sold or passed to unrelated parties for their own marketing purposes.

International Transfers

Your personal information is primarily processed and stored within the UK or the European Economic Area (EEA). Should any data be transferred outside the EEA, appropriate safeguards (such as standard contractual clauses) will be in place to ensure your information remains protected in line with GDPR requirements.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including:

• Completing your orders and resolving any post-sale queries
• Maintaining accurate records for accounting and legal purposes (typically for up to 7 years as required by UK law)
• Improving services and managing customer relationships (for a reasonable period unless you request deletion)

All records will be securely deleted or anonymized once they are no longer required.

Data Security

We implement appropriate technical and organizational measures to safeguard your personal data against loss, theft, unauthorized access, or alteration. These include secure databases, restricted access to those who need it, regular staff training, and ongoing review of security procedures.

Your Rights

Under data protection law, you have the following rights regarding your personal data:

• Access: Request a copy of your data and information on how we process it.
• Correction: Request that any inaccurate or incomplete data be corrected.
• Erasure ('right to be forgotten'): Ask us to delete your personal data where there is no legal reason for us to retain it.
• Restriction: Ask us to limit the processing of your data in certain circumstances.
• Data Portability: Request an electronic copy or transfer of your data to another service provider.
• Objection: Object to processing where we are relying on legitimate interests or direct marketing.
• Withdraw Consent: Where consent is the lawful basis, you may withdraw your consent at any time.

If you wish to exercise any of these rights or have questions about your data, please contact us through the methods available on our website or at our premises. We will respond to legitimate requests in accordance with GDPR requirements.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any such changes will be posted on our website and are effective from the posted date. We encourage you to review this policy periodically.

Contact and Further Information

If you have concerns about how your personal data is handled by Flowers Purley, or wish to exercise your data rights, please contact us using the available details on our website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unsatisfied with how we have handled your data.

Thank you for trusting Flowers Purley with your personal information.