Privacy Policy for Flowers Hemel Hempstead Customers
Introduction
This privacy policy describes how Flowers Hemel Hempstead ("we", "us", or "our") collects, uses, stores, and protects your personal information. This policy applies to all individuals who place an order for flowers or request services through Flowers Hemel Hempstead in Hemel Hempstead and surrounding districts. We are committed to ensuring that your privacy is protected and your data is handled securely and in accordance with current data protection laws, including the General Data Protection Regulation (GDPR).
What Data We Collect
To process your orders and provide our services, Flowers Hemel Hempstead may collect the following categories of personal data:
- Contact Information: such as your name, delivery address, billing address, and phone number.
- Order Information: including details about the flowers, products, and services you request, and any delivery instructions you provide.
- Payment Information: transaction identifiers and payment method details (please note, direct payment card data is processed securely by our payment processors and not retained by us).
- Correspondence: records of your interactions with us, including written communications or any feedback you choose to provide.
- Technical Information: such as IP address, browser type, and device information, collected through website analytics tools to ensure website functionality and enhance your experience.
Lawful Basis for Processing Your Data
Under the GDPR, we must have a legitimate or legal basis for collecting and processing your personal data. Flowers Hemel Hempstead relies on the following lawful grounds:
- Contract Performance: We process your data as necessary to fulfil orders and provide services you have requested.
- Legal Obligations: Certain data will be processed to comply with statutory requirements, such as record-keeping for tax or regulatory purposes.
- Legitimate Interests: We may use your information for our legitimate business interests, for example, to improve our services, prevent fraud, or manage customer relationships, provided these interests are not overridden by your rights.
- Consent: In limited cases (for example, for marketing purposes where you opt in), we will rely on your explicit consent, which you may withdraw at any time.
How We Use Your Data
Your information is used strictly for purposes relevant to the operation of our business and the delivery of our services:
- To process, deliver, and manage your flower orders and other requested services.
- To communicate regarding your order(s), including updates, delivery confirmations, or to resolve any issues or complaints.
- To manage accounts, process payments and handle refunds.
- To fulfill legal or regulatory obligations.
- To improve our website, services, and customer experience through feedback and analytics.
- Where you have consented, to send you information about offers, new products, or updates.
Data Processors and Third Parties
We work with trusted third-party service providers (data processors) to deliver our services and operate our website. These may include:
- Payment processors, who securely manage transactions and prevent fraudulent activity.
- Delivery partners, who assist in the delivery of your flower orders to the specified addresses.
- IT and hosting providers, involved in the secure management of our website and databases.
- Analytics service providers, who help monitor and improve website performance (only aggregated or anonymized data where possible).
All data processors are required to process your personal information only on our instructions and in compliance with this privacy policy and relevant data protection laws. Personal data is not shared with unrelated third parties unless required by law or for legal proceedings.
Data Retention
Flowers Hemel Hempstead retains your personal data only for as long as necessary to fulfill the purposes set out in this policy. Specifically:
- Order and transactional data are generally retained for seven years, in line with accounting and tax obligations.
- Customer correspondence is kept for up to two years after your last interaction with us, unless needed for ongoing queries or complaints.
- Technical and analytics data is typically anonymized and not linked to identifiable individuals after use.
Once the applicable retention period elapses, data will be securely deleted or anonymized.
Your Rights as a Data Subject
As a customer of Flowers Hemel Hempstead, you have rights under the GDPR regarding your personal data:
- Right to Access: You may request access to the personal data we hold about you.
- Right to Rectification: If your information is inaccurate or incomplete, you have the right to request correction.
- Right to Erasure: You can request deletion of your personal data where legally permissible; for example, if data is no longer necessary for the purposes collected.
- Right to Restrict Processing: You can ask us to halt processing your data while an issue is being resolved.
- Right to Data Portability: You may request to receive your personal data in a structured format, or for us to transfer it directly to another controller (where technically feasible).
- Right to Object: You may object to certain types of processing, such as direct marketing, at any time.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time.
To exercise any of the above rights, please contact us using the methods listed on our website or within your order confirmation.
Data Security
We prioritize the security of your information. All reasonable technical and organisational measures are in place to safeguard against unauthorised access, misuse, loss, or destruction of your personal data. This includes encryption where appropriate, secure data storage, and restricted access to data only for those who require it to perform their roles.
Applicability and Updates
This privacy policy applies to all customers ordering through Flowers Hemel Hempstead in Hemel Hempstead and the surrounding districts. We may amend this policy from time to time to reflect changes in our operations or legal requirements. You are encouraged to review this policy periodically. The most recent version will always be available on our website.
Contacting Us
If you have any questions about this policy, your rights, or how we process and protect your data, please contact us through the contact options provided on our website or within your order correspondence. We will address your concerns promptly and in accordance with relevant data protection obligations.