Your Personal Data & Privacy at Flowers Hackney Wick
Overview of Our Privacy Policy
This Privacy Policy outlines how Flowers Hackney Wick ("we", "us", or "our") collects, uses, and protects personal data obtained from all customers placing flower orders in Hackney Wick and neighbouring districts. We are committed to complying with the UK General Data Protection Regulation (GDPR) and ensuring the transparent, fair, and secure handling of your data.
Scope of This Policy
This policy applies to all individuals ordering from Flowers Hackney Wick from Hackney Wick and its surrounding neighbourhoods. It covers personal data gathered through our website, over the phone, in person, or by any other means in relation to flower orders.
What Personal Data We Collect
We collect the following types of personal data when you place an order or interact with us for services:
- Identification data: Name, address (for delivery and billing), phone number, and any other contact details provided.
- Order details: Purchase history, product preferences, delivery instructions, and transaction details.
- Payment data: Payment method (e.g., card type), last four digits of the payment card, and payment confirmation; we do not store full payment card numbers.
- Correspondence: Communications with us regarding orders, customer service enquiries, or other support interactions.
Lawful Basis for Data Processing
We rely on the following lawful bases, as outlined by the GDPR, for processing your personal data:
- Contractual necessity: We process data to fulfil and deliver your orders, manage billing, and provide customer support, as required to execute our agreement with you.
- Consent: For certain marketing communications or the use of optional data, we rely on your explicit consent which you can withdraw at any time.
- Legal obligations: We retain and process certain data to comply with tax, accounting, and other legal requirements.
- Legitimate interests: Where appropriate, we use data to improve our services, ensure system security, and enhance customer experience, provided these interests are not overridden by your fundamental rights and freedoms.
How We Use Your Data
Your personal data is used solely for the following purposes:
- To process, confirm, and fulfil orders for flowers or related services.
- To provide customer support, updates, and respond to enquiries.
- To manage our business operations, including payment processing and accounting.
- For internal record keeping and service improvement.
- If you have given explicit consent, to send tailored marketing communications or promotional offers.
Who Processes Your Data
To provide our services efficiently, we may share your information with trusted third-party processors. These include:
- Payment service providers: To facilitate secure payment and prevent fraud.
- Delivery partners or couriers: For the timely delivery of your flower orders.
- IT and hosting providers: For website and data storage services.
- Accountants or professional advisors: For compliance with legal and regulatory obligations.
All data processors act only on our instructions and are required to treat your data in accordance with UK data protection law. We do not sell your data or share it with third parties for their independent marketing purposes.
International Data Transfers
In rare cases where data may be processed or stored outside the United Kingdom, we ensure that adequate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data and maintain GDPR compliance.
Data Retention Periods
We retain your personal data only as long as necessary for the original purposes for which it was collected. This generally means:
- Order and transaction data are kept for up to seven years, in accordance with legal and accounting obligations.
- Contact and correspondence records related to active enquiries are retained for up to two years after the matter has concluded.
- Marketing data is retained only while your consent remains valid, or until you withdraw consent.
After these periods, your data is securely deleted or anonymised.
Your Rights Under GDPR
As a customer, you have several important rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You may correct inaccurate or incomplete data.
- Right to erasure: You can request deletion of your personal data, except where we must retain it for legal reasons.
- Right to restriction: You can ask us to pause processing of your data in certain circumstances.
- Right to data portability: You can request a copy of your data in a standard, machine-readable format.
- Right to object: You can object to processing based on our legitimate interests or for direct marketing.
- Right to withdraw consent: Where we process data based on your consent, you have the right to withdraw it at any time.
If you wish to exercise any of these rights, please contact us using the details found on our website or other official flowersHackneyWick communications. We may need to verify your identity before proceeding with your request.
Security Measures
We employ appropriate technical and organisational measures to safeguard your personal data, including secure servers, encryption, limited access controls, and regular staff training. While we take all reasonable steps, please note that no system can guarantee absolute security.
Policy Updates
We may periodically update this Privacy Policy to reflect changes in regulations, operational practices, or new services. We encourage you to review this page occasionally to remain informed about how we protect your privacy.
Contact & Complaints
If you have questions about how your data is handled, wish to exercise your rights, or wish to lodge a complaint, you may contact us through our published communication channels. If you are unsatisfied with our response, you may also raise a complaint with the UK Information Commissioner’s Office (ICO).