Flowers Ardleigh Green Privacy Policy

Scope and Commitment to Privacy

This Privacy Policy describes how Flowers Ardleigh Green collects, uses, and protects your personal information. It applies to all individuals placing orders for products and services with Flowers Ardleigh Green within Ardleigh Green and the surrounding districts. Flowers Ardleigh Green is committed to handling your data responsibly, transparently, and in compliance with the General Data Protection Regulation (GDPR).

Information We Collect

To provide you with our floral arrangement services, Flowers Ardleigh Green collects and processes certain information. The categories of personal data we may collect include:

• Identity Data: such as your name and, if required, the recipient’s name.
• Contact Information: including delivery address and sometimes contact details such as postal address or phone number for delivery purposes.
• Order Details: details about your order, including product selection and delivery instructions.
• Transaction Data: information about payments and payment methods. Please note that we do not store credit or debit card details ourselves; these are processed by third-party payment providers.
• Correspondence: records of communications you have with us, such as order inquiries or feedback.
• Technical Data: such as IP address and browser type, which may be automatically collected for security and website optimization purposes.

Lawful Basis for Processing Your Data

Flowers Ardleigh Green processes your personal data in accordance with the GDPR. Our lawful bases for processing are:

• Contractual Necessity: Most data we collect is required to fulfill your order (e.g., delivering flowers to the correct address, contacting you regarding your order).
• Legal Compliance: In some cases, we may need to process your data to comply with local laws and regulations.
• Legitimate Interests: We may use your data to improve our services, maintain security, and ensure customer satisfaction, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent (for example, for optional marketing communications), you are free to withdraw it at any time.

How We Use Your Data

Your data will be used strictly for the purposes for which it was collected. These include:

• Processing and delivering your orders, including handling payments and providing delivery updates.
• Communicating with you regarding orders, inquiries, or issues that arise during the provisioning of our services.
• Improving our customer service, analyzing trends, and optimizing our services and website performance.
• Complying with regulatory and legal obligations.

How Long We Retain Your Data

Flowers Ardleigh Green retains personal data only for as long as it is necessary for the purposes outlined in this policy:

• Order and Transaction Data: Retained for up to six years to comply with accounting and tax laws, and to resolve potential disputes.
• Customer Correspondence: Retained for up to two years from the date of your last communication unless legal or legitimate interest reasons mean we need to keep data longer.
• Technical Data: Retained for security, analytics, and troubleshooting purposes, but typically only for a short period unless needed in connection with ongoing investigations or legal matters.

Third Party Processors

To provide our services efficiently, Flowers Ardleigh Green may use third-party service providers (data processors) for tasks like payment processing, IT hosting, and delivery logistics. Our main categories of processors are:

• Payment Providers: Securely process your payment information; we do not retain your card details.
• IT and Cloud Services: Providers that support our website and order management systems.
• Delivery Partners: Third parties who assist in delivering orders outside our immediate delivery area.

All processors are required to comply with GDPR and are bound by contracts to process your data only on our instructions, keep it secure, and not share it for their own purposes.

Your Data Protection Rights

Under the GDPR, you have the following rights in relation to the personal data we hold about you:

• Right to Access: You may request a copy of your personal data and information about how it is processed.
• Right to Rectification: You can ask us to correct data that is inaccurate or incomplete.
• Right to Erasure: In certain cases, you may request that we delete your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You can ask us to limit processing where you believe your data is inaccurate or the processing is unlawful.
• Right to Object: You can object to processing based on legitimate interests, or for direct marketing purposes.
• Data Portability: Where we process data based on your consent or contract, you may request a copy in a structured, commonly used electronic format.
• Right to Withdraw Consent: Where we process data purely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, or if you have concerns about how we handle your personal information, you may contact us via the methods available on our website.

Data Security

Flowers Ardleigh Green takes the protection of your data seriously. We implement and maintain appropriate technical and organizational measures such as encryption, secure storage, and access controls, to safeguard your personal data from unauthorized access, loss, or misuse. We regularly review and test our security policies and measures.

International Data Transfers

Your data is generally stored and processed within the United Kingdom or European Economic Area (EEA). If it is ever necessary to transfer your data outside the EEA, we ensure that appropriate safeguards, such as standard contractual clauses or adequacy decisions, are in place as required by GDPR.

Policy Updates

Flowers Ardleigh Green may occasionally update this Privacy Policy to reflect legal requirements or changes in our practices. We will notify you of any material changes through our website and update the effective date accordingly. We encourage you to review this policy periodically.

Contact and Complaints

If you have any questions about this policy or how your personal information is handled, please use the contact options on our website. If you are unsatisfied with our response, you may also lodge a complaint with the Information Commissioner’s Office (ICO) or the relevant authority in your jurisdiction.

This Privacy Policy was last updated in June 2024.