Privacy Policy for Customers of Flowers Weybridge

Introduction

At Flowers Weybridge, we are committed to protecting and respecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you place an order with Flowers Weybridge, whether as a resident of Weybridge or the surrounding districts. We are dedicated to complying with all applicable data protection legislation, including the General Data Protection Regulation (GDPR).

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Flowers Weybridge, either directly or on behalf of another recipient, for delivery in Weybridge and nearby areas. By ordering our products or services, you acknowledge that you have read and understood the terms outlined in this policy.

What Personal Data We Collect

Flowers Weybridge collects different types of personal data when you interact with us, place an order, or communicate with our team. The information we may collect includes:

  • Identification Information: Full name, billing, and delivery addresses.
  • Contact Details: Phone number and, when provided, email address.
  • Order Information: Details regarding products ordered, messages or notes for recipients, and delivery instructions.
  • Payment Information: Card payment details or other payment methods, processed securely via reputable payment processors.
  • Communication Records: Details of your correspondence with us, including queries, complaints, and feedback.

We do not collect special categories of personal data (also known as sensitive data) unless absolutely necessary and with your explicit consent.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a valid lawful basis to process your personal data. We use the following lawful bases:

  • Contractual Necessity: Processing your data is required to fulfill your order, provide requested products and services, and communicate order statuses.
  • Legitimate Interests: We may process your data for purposes such as customer support, improving service quality, or handling complaints, provided our interests do not override your rights.
  • Legal Obligations: Where required, we may process certain information to comply with tax, accounting, and other legal requirements.
  • Consent: Where we rely on your consent for specific uses (such as marketing communications), you can withdraw your consent at any time.

How We Use Your Information

Your information is only used for purposes connected to your interaction with Flowers Weybridge, including but not limited to:

  • Processing and delivering your flower orders.
  • Notifying you about order statuses and delivery updates.
  • Responding to queries, support requests, or complaints.
  • Handling payments and refunds.
  • Maintaining business and financial records as required by law.
  • Improving our products and customer experience.

We do not sell or rent your personal information to third parties for marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. The retention period may vary:

  • Order and transaction details are typically retained for up to six years to comply with tax and accounting obligations.
  • General correspondence related to an order may be kept for up to two years to assist with customer service and quality assurance.
  • Where retention is based on your consent (for example, to receive marketing information), we will retain data until you withdraw consent.

When data is no longer required, it will be securely deleted or anonymised.

Data Processors and Sharing of your Information

To efficiently deliver our services, we work with several trusted third-party providers who process data on our behalf. These processors include:

  • Payment processors: Securely handle payment transactions and do not provide us with your full payment details.
  • Delivery partners: Assist in delivering orders and may receive recipient names, addresses, and contact numbers.
  • IT and administrative support providers (such as order management and communication systems).

All third-party processors are contractually required to adhere to GDPR-compliant standards and security protocols and are only permitted to process your data for specified purposes.

In certain circumstances, we may also disclose your information if required by law, such as to comply with a court order or governmental request.

Your Rights under GDPR

As a customer, you have the following rights regarding your personal information:

  • Access: You may request access to a copy of the personal data we hold about you.
  • Rectification: You can ask us to correct or update inaccurate or incomplete data.
  • Erasure: In certain conditions, you may request deletion of your personal data (the right to be forgotten).
  • Restriction: You may request we restrict the processing of your data under specific circumstances.
  • Objection: You may object to certain types of data processing, such as direct marketing.
  • Data Portability: You have the right to request the transfer of your data to another service provider where technically feasible.
  • Consent Withdrawal: When processing is based on your consent, you can withdraw this at any time.

To exercise any of these rights, please contact us using the methods provided on our website, and we will respond in accordance with regulatory obligations.

Data Security

We implement appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. This includes the use of secure servers, regular security reviews, and staff training in data handling. While we strive to protect your data, no online transmission is completely secure; we urge you to take all necessary precautions when communicating with us.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in data protection law or our data handling practices. Any updates will be posted on our website with an updated revision date. If material changes are made, we will seek to notify you where appropriate.

Contact and Further Information

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please refer to our website's contact section. We are committed to resolving any concerns you may have about your privacy and personal data.