Flowers Brent GDPR Privacy Policy
Introduction and Scope
This Privacy Policy explains how Flowers Brent collects, uses, and protects your personal data when you place an order with us. This Policy applies to all customers ordering through Flowers Brent from Brent and surrounding districts. We are committed to safeguarding your information in accordance with the General Data Protection Regulation (GDPR).
What Data We Collect
To provide you with flower delivery and related services, we may collect the following categories of personal data:
- Identification Data: Name, title, and contact information (address, phone number where required for delivery).
- Order Information: Order details, such as product selections, delivery instructions, and any card messages included.
- Payment Details: Payment method, payment status, and transaction reference. (Credit/debit card details are processed securely by our payment processor and are not stored by Flowers Brent.)
- Communication Data: Any correspondence with our customer service, including service enquiries and feedback submitted by you.
- Technical Data: IP addresses, browser types, and operating systems collected through cookies or analytics tools (where applicable).
Lawful Basis for Processing
Your personal data is processed strictly in accordance with GDPR, based on the following lawful grounds:
- Contract: Processing your data is necessary to fulfil your flower order or to take steps at your request before entering into a contract (e.g., answering product queries).
- Legal Obligation: We may process certain information as required by law (for example, to maintain tax records).
- Legitimate Interests: We process personal data as required to provide and improve our services, ensuring efficient delivery and customer satisfaction. Such processing is balanced with your privacy rights.
- Consent: Where none of the above apply, we will seek your explicit consent before processing your personal data for specific purposes, such as marketing communications (if offered).
How We Use Your Information
Flowers Brent uses your information for the following purposes:
- To process and fulfil your flower orders, including arranging delivery and handling payments
- To communicate with you regarding your order and any service-related queries
- To manage transactions and issuance of invoices/receipts
- To improve our products and services based on feedback and analytics
- To fulfil legal and regulatory obligations
Data Processors and Data Sharing
Flowers Brent ensures that any third parties with whom your data is shared act strictly as data processors compliant with GDPR standards. These include:
- Payment processing companies, which handle transactions securely
- Delivery partners, for the logistical fulfilment of your order
- IT service providers, for website hosting, order management, and storage solutions
We do not sell your data to third parties. Your data will only be accessible to staff and suppliers strictly on a need-to-know basis, in line with the purposes described in this Policy.
International Data Transfers
If, in rare instances, your data is transferred outside the United Kingdom or European Economic Area (EEA), this will only occur when adequate safeguards are in place, as required by GDPR, to protect your information.
Data Retention
We retain your personal data only for as long as necessary to fulfil your order, handle follow-up queries, comply with legal requirements (such as accounting or tax obligations), and resolve any disputes. Typically, this means that:
- Order and transaction records are retained for up to six years after fulfilment, in accordance with statutory retention periods.
- Customer service correspondence is usually kept for up to two years following your enquiry.
After the relevant retention period has passed, your data will be securely deleted or anonymised.
Your Rights as a Data Subject
Under GDPR, you have the following rights concerning your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
- Right to Erasure: You have the right to request deletion of your data, subject to applicable legal requirements.
- Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances.
- Right to Data Portability: Where applicable, you can request that we provide your data to you or a third party in a structured, commonly used format.
- Right to Object: You have the right to object to processing carried out based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.
If you wish to exercise any of your rights, please contact us using the details provided on our website. We will respond to all requests in accordance with the GDPR timelines.
Safeguarding Your Information
Flowers Brent takes appropriate technical and organisational measures to protect your personal data from loss, unauthorised access, alteration, disclosure, or destruction. Only authorised staff and approved processors have access to your data as required for their duties.
Changes to This Policy
Flowers Brent may update this Privacy Policy from time to time to reflect changes in the law, technology, or our operations. When changes are made, the updated policy will be clearly posted on our website with the date of revision.
Contact and Complaints
If you have any questions or complaints about how we process your personal data, or if you wish to exercise your rights, please refer to the contact section of our website. You also have the right to lodge a complaint with the data protection supervisory authority if you are dissatisfied with our response.