Flowers Dagenham Privacy Policy

Privacy Policy for Flowers Dagenham Customers

This Privacy Policy explains how Flowers Dagenham (“we”, “our”, or “us”) collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection legislation. This policy applies to all customers who place orders with Flowers Dagenham from Dagenham and surrounding districts.

1. Data Controller

Flowers Dagenham is the data controller for the processing of your personal data. This means we determine the purposes and methods by which your information is handled.

2. What Data We Collect

We collect and process a range of personal data necessary to provide our services and fulfil your flower orders. The type of information we may collect includes:

• Contact information: your name, address, phone number, and delivery addresses.
• Order details: details of the flowers or products purchased, order notes, delivery instructions, and recipient’s information.
• Payment information: billing address and payment transaction details (note: we do not store full payment card details).
• Communication data: records of correspondence when you contact us via our website or other channels.
• Technical information: IP address, device information, browser type, and usage data collected via cookies or similar technologies to improve our services.

3. Lawful Basis for Processing

We process your personal data only when there is a legitimate basis to do so under GDPR. These bases include:

• Contractual necessity: Processing your data is necessary to fulfil and manage your orders or requests.
• Legal obligations: We may process data where required to comply with laws and regulations, such as taxation and accounting requirements.
• Legitimate interests: We may process data for business purposes, such as improving our services or managing customer relationships, provided it does not override your rights.
• Consent: Where we require your consent (for example, for marketing communications), we will obtain this separately and clearly from you. You have the right to withdraw consent at any time.

4. How We Use Your Data

Your personal information is used for the following:

• Processing, confirming, and delivering orders.
• Managing payments and addressing payment queries.
• Communicating with you about your order status, changes, or customer service issues.
• Improving the quality and efficiency of our products and customer experience.
• Complying with legal obligations.
• With your consent, sending marketing material related to Flowers Dagenham products, offers, or events.

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes it was collected, including for satisfying legal, accounting, or reporting requirements. In general:

• Order and transaction data will be retained for up to seven years to comply with financial regulations.
• Communications will be stored for three years after your last correspondence with us, unless you ask for earlier erasure and we are not legally obliged to retain them.
• Marketing data will be retained until you withdraw your consent or opt out from communications.

After the retention period, your data will be securely deleted or anonymised.

6. Data Processors and Third-Party Services

We may use third-party processors to assist in fulfilling orders, managing payments, delivering products, and maintaining our website. These processors are contractually bound to process your data only as instructed by us and to protect it to GDPR standards. Examples include payment processors, courier companies, and IT support providers. We do not sell your personal data.

If required by law, we may disclose personal data to law enforcement or regulatory authorities.

7. Data Security

Protecting your personal data is important to us. We use appropriate technical and organisational measures to safeguard your information against accidental loss, destruction, unauthorised access, or disclosure. This includes secure storage, restricted access, and regular procedures for reviewing security controls.

8. International Transfers

Your data is predominantly processed within the United Kingdom. If it becomes necessary to transfer your data outside the UK, we will ensure it is protected with suitable safeguards as required by GDPR, such as using approved contractual clauses.

9. Your Rights Under GDPR

You have several rights regarding your personal data under GDPR:

• Right to access: Obtain a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Ask us to delete your data in certain circumstances (“right to be forgotten”).
• Right to restrict processing: Ask us to limit how we use your data under specific conditions.
• Right to data portability: Receive a copy of the data in a commonly used format and/or have it transferred to another controller.
• Right to object: Object to processing, particularly where it’s based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where you have provided consent, you may withdraw it at any time.
• Right to lodge a complaint: You can lodge a complaint with the UK Information Commissioner’s Office if you have concerns about how we handle your data.

10. Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our processes, technology, or legal obligations. We will notify you of any significant changes in how we use your personal data, where appropriate.

11. Contacting Us

If you wish to exercise any of your rights, have questions about this policy, or need further information about our privacy practices, please contact us using the information provided on our website or in-store. We will take your request seriously and respond within the timescales set out in GDPR.

This Privacy Policy was last updated in June 2024.