Flowers Crayford Privacy Policy

Introduction

This Privacy Policy explains how Flowers Crayford collects, uses, retains, and protects your personal data when you place orders with us from Crayford and the surrounding districts. We are fully committed to complying with the General Data Protection Regulation (GDPR) and to safeguarding your privacy. This policy outlines what personal information we process, our lawful basis for doing so, how long your data is kept, details of our data processors, and your rights as a data subject.

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Flowers Crayford from Crayford and the surrounding districts. By accessing our services or placing an order, you consent to the processing of your personal data as described in this policy.

What Data We Collect

When you place an order or interact with Flowers Crayford, we may collect the following types of personal data:

• Identity Data: Name, title
• Contact Data: Billing and delivery addresses, telephone numbers, and (where applicable) your email address
• Order Details: Information about goods or services ordered, delivery preferences, order history
• Payment Information: Transaction details; payment card information is processed securely by our payment providers and is not stored by Flowers Crayford
• Correspondence: Communications with us, including queries, complaints, or feedback
• Technical Data: Limited device and usage information, such as IP address, if you interact with our website

We do not collect or process special categories of personal data or information about children under 16 years of age.

Lawful Basis for Processing

Flowers Crayford only processes personal data when we have a lawful basis to do so under Article 6 of the GDPR. Our lawful bases for collecting and processing your data include:

• Contractual Necessity: To process and fulfill your order, deliver flowers and related goods, and provide customer support regarding your purchase
• Legal Obligation: To comply with legal or regulatory requirements, such as tax or accounting rules
• Legitimate Interests: To improve our services, prevent fraud, respond to customer inquiries, or send necessary communications regarding your order
• Consent: In situations where the law requires consent (for example, for marketing communications), we will obtain your explicit agreement before proceeding

How We Use Your Data

Your personal data is used for the following purposes:

• Processing, confirming, and delivering your flower orders
• Managing payment transactions
• Responding to your queries, complaints, or requests
• Keeping records for legal and financial purposes
• Anonymously analysing order trends to improve our services

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Our retention policy is as follows:

• Order and account data: Kept for up to 7 years after the completion of your order, in line with legal requirements (such as HMRC accounting rules)
• Correspondence: Retained for up to 3 years after your enquiry has been resolved
• Technical data: May be retained for up to 2 years for security and analytical reasons

When data is no longer required, it is securely deleted or anonymised.

Our Data Processors

To operate our business, we use trusted third-party processors who may handle your personal data on our behalf. These processors include:

• Payment service providers (for secure online transactions)
• IT service providers (for secure hosting, order management, and data storage)
• Delivery and courier partners (to fulfill your flower delivery in Crayford and nearby areas)

We ensure that any processor acting on our behalf provides adequate safeguards and processes personal data only as instructed by Flowers Crayford, in compliance with GDPR. We do not sell your data to any third parties.

Your Rights Under GDPR

As a data subject under the GDPR, you have important rights concerning your personal data:

• Right to Access: You may request a copy of the personal information we hold about you
• Right to Rectification: You can request corrections to inaccurate or incomplete data
• Right to Erasure: In certain situations, you can request the deletion of your data (the 'right to be forgotten')
• Right to Restrict Processing: You may ask us to suspend processing your personal information under certain circumstances
• Right to Data Portability: You are entitled to receive your data in a structured, commonly used, and machine-readable format
• Right to Object: You can object to the processing of your data where we rely on legitimate interests or for direct marketing purposes

To exercise any of these rights, you may contact us with your request. We will respond in line with our legal obligations, typically within one month.

Data Security

Flowers Crayford is committed to ensuring your personal data is secure. We implement appropriate organisational and technical measures to prevent unauthorised access, disclosure, loss, or destruction. These measures include encrypted storage, access restrictions, and secure payment processing through our trusted providers.

International Data Transfers

Your personal data is normally processed within the United Kingdom and the European Economic Area (EEA). Where it becomes necessary to transfer your data outside the EEA, we ensure adequate levels of protection in accordance with GDPR requirements.

Changes to This Privacy Policy

We may update this policy from time to time. Any significant changes will be communicated to you via our website or when you next interact with our service. We encourage you to review this policy regularly.

Contact and Further Information

If you have questions about this Privacy Policy, your rights, or how we handle your personal data, please reach out to us through the methods provided on our website or in your order documentation. We are dedicated to resolving any privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).