Flowers Cricklewood GDPR Privacy Policy

Name: ALL OF ME
Brand: Flowers Cricklewood
Price: 100.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Flowers Cricklewood ('we', 'our', 'us') collects, processes, and protects your personal data when you place orders with us, whether online, by phone, or in person, within Cricklewood and its surrounding districts. We are committed to ensuring your data remains safe and that we operate in accordance with the General Data Protection Regulation (GDPR) and related data protection laws.

Scope of This Policy

This policy applies to all customers placing orders with Flowers Cricklewood, based in Cricklewood and serving surrounding areas. By placing an order with us, you acknowledge the collection and processing of your data as outlined below.

What Data We Collect

When you interact with Flowers Cricklewood, we collect and process the following types of personal data:

Identification Data: Name, title.
Contact Information: Delivery address, billing address, phone number, and other details necessary to fulfil orders.
Order Information: Details of items purchased, delivery instructions, order history.
Payment Information: Only necessary payment data (e.g., transaction confirmation), processed securely by our payment processors. We do not store full card details on our systems.
Communication Records: Order confirmations, queries, complaints, or feedback you provide about our services.
Technical Data: IP address, browser type, and information collected by cookies if you use our website (for operational purposes and protected by relevant disclaimers).

Lawful Basis for Processing

Under GDPR, our main lawful bases for processing your personal data are:

Contractual Necessity: We process your data primarily to fulfil your orders and to provide you with the requested products and services.
Legal Obligation: We may process data if required by applicable laws, such as for tax or accounting purposes.
Legitimate Interests: We may use your data to improve our services, communicate important service information, or prevent fraud, provided these uses do not override your interests and rights.
Consent: If we intend to process your data for marketing beyond the above, we will obtain your explicit consent. You may withdraw this consent at any time.

How Data Is Used

Your data is used strictly for the following purposes:

Processing and delivering your orders.
Managing payments and refunds.
Communicating with you regarding your order, delivery status, or issues.
Improving our services and responding to your feedback.
Complying with legal and regulatory obligations.

Data Retention

We retain personal data only as long as necessary for the purposes described:

Order and Transaction Data: Retained for a minimum of six years to comply with accounting and tax regulations.
Customer Service Records: Retained for up to two years after your last interaction unless further retention is required for legal reasons.
Marketing Preferences: Retained until you withdraw consent or request erasure.
After applicable retention periods, your data will be securely deleted or anonymised.

Data Processors and Third Parties

To efficiently provide our services, we may share your data with trusted third-party processors. These include:

Payment Processors: Securely handle payment transactions. Only essential payment information is processed, and card details are not stored by us.
Delivery Partners: To facilitate product delivery.
IT System Providers: Providers who support our data storage, website operations, and security systems.

All third-party processors act in accordance with written agreements and only process your data as instructed by us, in compliance with GDPR. We do not sell or share your personal data for commercial purposes.

User Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct incomplete or inaccurate data we hold.
Right to Erasure: You can request the deletion of your personal data where there is no overriding legal reason for us to retain it.
Right to Restrict Processing: In certain situations, you can ask us to restrict how we process your data.
Right to Data Portability: You may request that we transfer your personal information to another service provider.
Right to Object: You have the right to object to certain types of data processing, such as direct marketing.

If you wish to exercise your rights, you may do so by contacting us using the details available on our website or through our store.

Data Security

We implement industry-standard security measures to protect your personal data from unauthorised access, alteration, disclosure, or deletion. This includes secure storage, strict access controls, and encrypted communication channels where applicable.

International Transfers

Your personal data is generally processed within the United Kingdom and the European Economic Area (EEA). Should your data need to be transferred outside these territories, such transfers will only occur where adequate safeguards have been implemented as required by GDPR.

Updates to This Policy

We may update this Privacy Policy from time to time in accordance with changes to legal requirements or improvements to our practices. The most current version will always be available at our premises and on our website.

Contact

If you have any questions about this Privacy Policy or how we handle your data, please reach out via the contact information available on our website or at our store in Cricklewood.

Conclusion

Your trust is important to us. We are committed to handling your personal data responsibly, transparently, and in accordance with your rights under GDPR and data protection law.