Flowers Queen's Park Data Protection & Privacy Policy

Scope of This Privacy Policy

This Privacy Policy governs how Flowers Queen's Park collects, uses, manages, and protects personal data of all customers placing orders from Queen's Park and the surrounding districts. It outlines your rights under the General Data Protection Regulation (GDPR) and applies to all data gathered during the ordering process, whether online, by phone, or in person.

Personal Data We Collect

When you place an order with Flowers Queen's Park, we may collect and process the following categories of personal data:

• Identity Data: Your name, title, and, if applicable, the recipient’s name.
• Contact Data: Address, delivery address, telephone number, and any other contact details you provide.
• Order Data: Details about the products you order, delivery instructions, and payment details (processed by third-party gateways).
• Correspondence and Communications: Records of your communications with us, including queries, complaints, or feedback.
• Technical Data: Where applicable, IP address, device type, browser type, and usage data for web orders (used to improve our service).

Lawful Basis for Processing Personal Data

Flowers Queen's Park processes your personal data on the following legal bases as defined by GDPR:

• Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., to fulfill your flower order, manage payments, or arrange delivery).
• Legal Obligation: We process data as required to comply with legal obligations (e.g., recordkeeping for tax purposes).
• Legitimate Interests: We process data where doing so is necessary for our legitimate interests, such as ensuring service quality, fraud prevention, or responding to your inquiries, provided these interests do not override your rights and freedoms.
• Consent: Where we seek your express consent, such as for optional marketing communications or where sensitive data is requested, you may withdraw this consent at any time.

How We Use Your Data

Your personal data is processed for the following purposes:

• To confirm, process, and fulfill your orders and requests.
• To arrange delivery of products, including communicating order details with delivery partners.
• To process payments via secure, GDPR-compliant payment service providers.
• To provide customer support and respond to your queries or feedback.
• To improve our products, services, and website experience.
• To comply with legal or regulatory requirements.
• Only with your consent, to send marketing or promotional materials relevant to your interests.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including the satisfaction of any legal, regulatory, tax, accounting, or reporting requirements. Typically, your data will be held for up to seven years following your last interaction with Flowers Queen's Park, except where a longer retention period is required or permitted by law. After this period, personal data is securely deleted or anonymized.

Data Processors and Third Parties

To fulfill your order and run our business, we may share your data with trusted third parties, known as data processors. Examples of data processors include:

• Payment Processors: For secure processing of credit/debit card payments (never stored directly by Flowers Queen's Park).
• Delivery Partners: For arranging and completing deliveries to your chosen address.
• IT and Cloud Service Providers: For secure data hosting, system support, and order tracking.

These third-party service providers are contractually required to safeguard your personal data and process it only according to our instructions, always within the requirements of the GDPR.

We do not sell, rent, or trade your personal information to any other external organizations or parties for marketing purposes.

Your Rights Under GDPR

You have several important rights in relation to your personal data, as provided by the GDPR. These rights include:

• Right to Access: Request access to your personal data held by us.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data we hold.
• Right to Erasure: Request deletion of your personal data where there is no good reason for continued processing.
• Right to Restriction: Request restriction of processing where you contest the accuracy or object to processing.
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and, where possible, have it transmitted to another organization.
• Right to Object: Object to our processing of your personal data where we rely on legitimate interests or direct marketing (including profiling).
• Right to Withdraw Consent: Withdraw consent at any time, where we are relying on consent to process your personal data.
• Right to Lodge a Complaint: Lodge a complaint with a supervisory authority if you believe your data protection rights have been breached.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, misuse, accidental loss, destruction, or damage. Access to your data is strictly limited to those personnel, contractors, and third parties who need it to carry out their duties and only within the scope of this policy.

International Data Transfers

Flowers Queen's Park primarily stores and processes your data within the United Kingdom or the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate safeguards are in place to comply with GDPR requirements.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Updated versions will be posted on our website with a revised date. We encourage you to review this policy regularly to stay informed about how we protect your data.

Contact & Exercising Your Rights

If you have questions about this policy or wish to exercise any of your data rights, please contact us using the contact options provided on our website or in-store.

This policy was last updated on the effective date noted below.

Effective Date: 1 June 2024