Flowers Docklands Privacy Policy

About This Privacy Policy

This Privacy Policy explains how Flowers Docklands collects, uses, shares, and protects your personal data when you place orders with us in Docklands and the surrounding districts. It also sets out your rights under the UK General Data Protection Regulation (GDPR) and related legislation. By placing an order with Flowers Docklands, you acknowledge and agree to the practices described in this policy.

Who Does This Policy Apply To?

This policy applies to all customers who place orders with Flowers Docklands, whether online, by telephone, or in person, and who reside in or have deliveries to Docklands and its surrounding districts.

What Personal Data We Collect

When you interact with Flowers Docklands, we collect and process certain personal data about you. The data we collect may include:

• Identification Data: Name, delivery address, billing address, and postcode.
• Contact Details: Telephone number, and any other contact information you provide when ordering.
• Order Information: Details of your purchases, including flower selections, delivery notes, and purchase history.
• Payment Data: Payment card details are collected and processed securely through our payment providers.
• Communications: Content of communications when you contact us for customer support, inquiries, or feedback.
• Technical Data: If you use our website, data such as IP address, browser type, device information, and cookies (where applicable).

Our Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful basis for collecting and using your personal data. Depending on the circumstances, we rely on the following lawful bases:

• Contract: Processing is necessary to fulfil our contract with you to supply flowers and related products, including payment processing and delivery.
• Legal Obligation: To comply with applicable laws (for example, retaining certain transaction records for tax purposes).
• Legitimate Interests: To communicate with you regarding your orders, to improve our services, to carry out fraud monitoring, or to address customer service issues.
• Consent: Where we collect data for optional purposes, such as sending promotional communications, we will ask for your consent, which you can withdraw at any time.

How We Use Your Personal Data

Your data is used for the following purposes:

• Processing and delivering your orders.
• Managing payments and refunds.
• Communicating order updates and responding to your inquiries.
• Improving our flowers, website, and customer experience.
• Meeting legal and regulatory requirements.
• Carrying out fraud prevention and security checks.

Who We Share Your Data With (Processors)

Your personal data may be shared with trusted third-party service providers ("processors") only as necessary to fulfil your order and support our operations, including:

• Payment Processors: To securely process payments and prevent fraud.
• Delivery Partners: To deliver your orders to the specified address.
• IT and Cloud Service Providers: To host our databases, manage communications, and ensure technical support.
• Professional Advisors: Such as accountants, auditors, or legal advisors where required to comply with our legal obligations.

All processors are contractually obliged to process your data only for the specified purposes and to maintain adequate security measures. We do not sell your personal data to any third parties.

International Data Transfers

We aim to keep your data within the UK and European Economic Area (EEA) as much as possible. If it becomes necessary to transfer your data outside the UK/EEA (for example, if a processor uses servers abroad), we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data rights.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically, order and transaction data is kept for six years to comply with tax and accounting rules. Marketing or communications data is retained for as long as you remain subscribed or until you withdraw consent.

After the relevant retention period has expired, your data is securely deleted or anonymised so that it can no longer identify you.

Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct inaccurate or incomplete data.
• Erasure: You can request the deletion of your data in certain circumstances.
• Restriction: You can ask us to restrict our processing of your data under specific conditions.
• Portability: You can request a copy of your data in a machine-readable format for your own use or to transfer to another provider.
• Objection: You may object to processing based on our legitimate interests or direct marketing.
• Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time.

We aim to respond to all legitimate requests within one month. To exercise any of these rights, please contact us using the contact details on our website or contact page.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local data protection supervisory authority.

Keeping Your Data Secure

We implement appropriate technical and organisational measures to safeguard your personal data. This includes secure payment channels, strong password protections, data encryption, and access controls. Only authorised personnel and processors with a need to know will have access to your information.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant laws. Any significant changes will be brought to your attention where appropriate. Please check this page regularly to make sure you are aware of any updates.

Contacting Flowers Docklands

If you have any questions about this policy or how your data is handled, please get in touch using the contact options provided on our website. We are committed to respecting and protecting your privacy.