Flowers Chertsey Customer Data Privacy Policy

Introduction

At Flowers Chertsey, your privacy is important to us. We are committed to handling your personal data responsibly, transparently, and in strict compliance with the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, retain, process, and safeguard your personal information. This Policy applies to all customers placing orders from Chertsey and the surrounding districts.

What Data We Collect

When you interact with Flowers Chertsey, including placing orders, making inquiries, or accessing our services, we may collect and process the following categories of personal data:

• Identity Data: Name, title, and where applicable, the name of a recipient for delivery.
• Contact Data: Address (for delivery and/or billing), postcode, and location for delivery within Chertsey and areas we serve.
• Communication Data: Order notes, messages, requests, and any correspondence sent to us regarding your order or inquiry.
• Transaction Data: Details about payments made or received, products ordered, and order history.
• Technical Data: Device type, IP address, browser type, and details relating to how you interact with our website (collected by cookies and similar technologies where applicable).

We only collect information that is necessary for us to provide you with our flower delivery and associated services.

Lawful Basis for Processing Your Data

The GDPR requires us to have a legal basis for processing your personal data. Flowers Chertsey may process your information under one or more of the following lawful bases:

• Contract: Most of our data processing occurs to fulfill or prepare to enter a contract with you, such as processing your orders and delivering flowers.
• Legal Obligation: We may process your data to comply with legal requirements, such as tax or accounting obligations.
• Legitimate Interests: Occasionally, we process your data for our own legitimate business interests, such as service improvement, fraud prevention, or marketing to existing customers. In such cases, we always balance these interests with your data protection rights.
• Consent: Where required, we will seek your explicit consent (for example, for certain marketing communications).

How We Use Your Information

Your personal data will be used for the following purposes:

• Processing and fulfilling your orders for flowers and related products.
• Arranging delivery to you or your nominated recipient, including contacting you if necessary about your order.
• Maintaining accurate internal records of transactions and communications.
• Managing payments, refunds, and accounting.
• Responding to your requests, questions, or complaints.
• Improving our services and website user experience.
• Where permitted, sending you information or updates about our services, products, promotions, or local community initiatives.

How Long We Retain Your Data

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including providing our services, satisfying any legal, accounting, or statutory obligations, and resolving disputes. Typically, transactional data is retained for up to seven years for tax and legal record-keeping. Data used for marketing communications is retained only as long as you remain subscribed or until you withdraw your consent. When your data is no longer required, it will be securely deleted or anonymized.

Data Processors and Sharing

Flowers Chertsey works with trusted third-party providers (“data processors”) in order to provide our services. Examples include payment processing providers, delivery and logistics partners, IT support services, and website hosting agencies. We ensure all processors adhere to GDPR requirements for handling and safeguarding your data, acting only under our instructions. Your information will never be sold or leased to marketing companies or unrelated third parties. We may disclose personal information if required by law or to enforce our legal rights.

User Rights Under GDPR

As a customer of Flowers Chertsey, you have a number of rights regarding your personal data, including:

• Right of Access: You may request a copy of the personal information we hold about you and details about how it is used.
• Right to Rectification: If your data is inaccurate or incomplete, you can ask us to amend it.
• Right to Erasure: In certain circumstances, you can request the deletion of your data (“right to be forgotten”).
• Right to Restrict Processing: You can ask us to suspend or restrict the processing of your data in some situations.
• Right to Object: You have the right to object to the processing of your data in specific scenarios, such as for direct marketing purposes.
• Right to Data Portability: You may request to receive your data in a structured, commonly-used format or have it transmitted to another provider.
• Right to Withdraw Consent: Where your data is processed by consent, you can withdraw your consent at any time without affecting previous lawful processing.

To exercise any of these rights, please contact Flowers Chertsey using the contact details available on our website or through your usual means of communication with us. We may need to confirm your identity to process certain requests. We strive to respond to all valid requests within one month.

Security Measures

Flowers Chertsey takes the security of your data seriously. We implement appropriate technical and organizational measures to protect your information from unauthorized access, accidental loss, disclosure, or unlawful processing. This includes secure storage solutions, limited access controls, data encryption where applicable, and staff training on data protection principles.

Policy Scope and Updates

This policy applies to all individuals placing orders with Flowers Chertsey from Chertsey and the surrounding districts. We may occasionally update this Privacy Policy to reflect changes in our services, legal obligations, or data practices. When changes are made, the latest version will be published on our website, and the "last updated" date will be amended accordingly. We encourage you to review this Policy periodically.

Contact and Concerns

If you have any concerns about how your personal information is handled by Flowers Chertsey or wish to exercise your rights, please use the contact channels provided on our website. If you believe your data rights have not been upheld, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO), or your local supervisory authority.