Flowers Harmondsworth Privacy Policy

Introduction

This Privacy Policy describes how Flowers Harmondsworth ('we', 'our', or 'us') collects, processes, and protects personal data of our customers in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all individuals placing orders with Flowers Harmondsworth, including those residing in Harmondsworth and the surrounding districts.

Personal Data We Collect

When you place an order with Flowers Harmondsworth, we collect and process personal data necessary to fulfill and deliver your order, improve our services, and comply with legal and regulatory obligations. The types of personal data we collect may include:

• Contact Details: Your name, address, postcode, and telephone number;
• Order Information: Details of your order, delivery instructions, and recipient details;
• Payment Information: Payment card details and billing addresses (handled securely by payment processors);
• Communication Records: Any correspondence you have with us regarding your order or our services.

We do not intentionally collect special categories of personal data (such as data about health, ethnicity, or religion) unless explicitly provided by you through communications, and only insofar as it is necessary for the requested service (e.g., to fulfil specific delivery requests).

Lawful Basis for Processing Personal Data

Under the GDPR, we only process your personal data where there is a legal basis to do so. Our main lawful bases for processing your data include:

• Contractual Necessity: Processing is required to fulfil the flower order you place with us, including processing payment, delivering orders, and following up on any queries.
• Legitimate Interests: We may use your data for our legitimate business interests, such as improving our services, keeping appropriate records, and maintaining the security of our services. We always balance these interests against your individual rights.
• Legal Compliance: In certain circumstances, we are obliged to process your information due to legal and regulatory requirements.
• Consent: Where none of the above lawful bases apply, we will request your explicit consent before processing your personal data (for example, for direct marketing communications, which you can opt out of at any time).

How We Use Your Data

We use personal data provided by our customers for the following purposes:

• To accept, process, and deliver your orders;
• To process payments securely via verified payment processors;
• To respond to your enquiries or requests and provide customer service;
• To comply with legal obligations, such as record-keeping and order verification;
• To improve the effectiveness of our service through analytics and feedback (using anonymized and aggregated data where possible);
• To inform you about order status or, with your permission, future offers and products.

Retention of Your Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. Typically:

• Order and Contact Information: Retained for up to 7 years to comply with record-keeping laws and potential warranty or dispute resolution;
• Bank Card and Payment Details: Not stored by us; handled by secure, third-party payment processors;
• Marketing Preferences: Retained until you withdraw your consent or opt out.

At the end of retention periods, your data will be securely deleted or anonymized so it can no longer be associated with you.

Our Use of Data Processors

Your personal data may be shared with trusted third parties ('processors') who assist us in delivering your order and running our business. These include:

• Payment processing providers to handle transactions securely;
• Delivery service companies for delivering your flowers;
• IT and systems providers who support our website and store order information.

All processors are required by contract to keep your data confidential, use it only as instructed by us, and ensure the security of data in line with GDPR requirements. We do not sell or rent your personal data to any third parties.

Your Rights Under GDPR

If you are a customer ordering from Harmondsworth or the surrounding districts, you have several rights regarding your personal data under GDPR:

• Right to Access: You can request details of the personal data we hold about you;
• Right to Rectification: You can ask us to correct inaccuracies in your data;
• Right to Erasure: You can request deletion of your personal data where there is no compelling reason for us to continue processing it;
• Right to Restrict Processing: You can ask us to restrict how we use your data;
• Right to Object: You can object to us processing your data in certain circumstances;
• Right to Data Portability: You can request that we transfer your data to another service provider in a commonly used format.

Where processing is based on your consent, you can withdraw that consent at any time. If you wish to exercise any of these rights, you may contact us using the methods available on our website or point of service. We may need to verify your identity to respond to your requests.

Data Security

We take your data security seriously. We have implemented appropriate administrative, technical, and physical measures to protect your data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Our staff and processors are trained and obligated to follow these procedures.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in regulations or our services. We encourage you to review this policy periodically. Updated versions will always be available where you place your orders.

Contact and Complaints

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us using the contact methods provided on our website or in-store. If you are not satisfied with how we handle your request, you may lodge a complaint with the UK Information Commissioner's Office (ICO).