Privacy Policy for Flowers Chelsea Customers
Introduction
This Privacy Policy explains how Flowers Chelsea collects, uses, stores, discloses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Chelsea for delivery in Chelsea and the surrounding districts. We are committed to maintaining your privacy and protecting your information whenever you interact with us, whether through our website, by phone, or in person.
1. Data We Collect
Flowers Chelsea collects personal data necessary for fulfilling customer orders and providing our services. Depending on how you interact with us, we may collect the following categories of data:
- Personal Identification Data: Names (sender and recipient), address, and contact information (such as delivery addresses and phone numbers).
- Order and Transaction Data: Purchase and delivery details, order history, transaction amounts, payment verification (no payment card or bank details are stored by us, only confirmation of payment from our payment processor).
- Communications: Any communications between you and Flowers Chelsea, such as emails, notes about your order, or special instructions.
- Website Usage Data: Information about your interactions with our website, such as navigational data, IP address, browser type, and device identifiers collected through cookies and similar technologies (see our Cookie Policy for more information).
2. Lawful Basis for Processing
The GDPR requires us to state the lawful bases on which we process your personal data. Flowers Chelsea processes your data under the following main lawful bases:
- Contractual Necessity: We collect and process your data to perform our contract with you, for example, to process your flower order and arrange delivery.
- Legal Obligation: We process some data to comply with legal requirements, for example, maintaining transaction records for tax purposes.
- Legitimate Interests: We may process data to pursue our legitimate business interests, such as improving our services, enhancing customer experience, and ensuring website security, provided these interests are not overridden by your rights and freedoms.
- Consent: In certain situations, such as for direct marketing by email or for the placement of certain cookies, we will only process your data if you have given your consent. You can withdraw your consent at any time.
3. Data Retention
Flowers Chelsea will store your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Typically:
- Order details and associated customer information are held for up to 6 years to meet contractual and legal requirements (such as tax or accounting regulations).
- Records of communications or enquiries not leading to an order may be retained for up to 12 months to answer follow-up enquiries and improve our customer service.
- Website usage data is retained as outlined in our Cookie Policy and deleted or anonymised when no longer required for analytics or security.
After the retention period expires, your data will be securely deleted or transformed into a non-identifiable format.
4. Data Processors and Third Parties
Flowers Chelsea uses* trusted third-party service providers ('processors') to help deliver our products and services. Wherever a processor acts on our behalf, they are only permitted to use your personal data in accordance with our instructions and in compliance with this policy and GDPR. Categories of processors and third parties include:
- Payment Processors: For secure processing of your payment transactions.
- Delivery Partners: For delivering your flower orders in Chelsea and surrounding areas.
- IT and Website Hosting Providers: For hosting our website and ensuring its security and availability.
- Email Communication Providers: To send order confirmations and order-related communication.
- Analytics Providers: To help us understand website usage and improve our services (using anonymised and aggregated data where possible).
We require all our processors to implement appropriate safeguards and not to process your personal data outside the European Economic Area unless an adequate level of protection is ensured.
5. How We Protect Your Data
We take data security seriously and use technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Security measures include encrypted connections (SSL/TLS) for website transactions, secure storage systems, limited access controls, regular security reviews, and staff training on data privacy.
6. Your Rights Under GDPR
You have rights regarding the personal data Flowers Chelsea holds about you under the GDPR. These include:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
- Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data under certain circumstances.
- Right to Restrict Processing: You can request us to restrict processing your data in certain cases.
- Right to Data Portability: You may request that your data be transferred to another organisation, where technically feasible.
- Right to Object: You can object to the processing of your data where we rely on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been breached.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The latest version will always be available for customers when placing orders via Flowers Chelsea.
8. Contact Information
If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us using the contact details provided on our website or in your order confirmation materials.
This Privacy Policy is effective from the date published and applies to all orders placed with Flowers Chelsea for delivery in Chelsea and surrounding districts.