Flowers Westminster Privacy Policy

Name: BRIGHT KISS
Brand: Flowers Westminster
Price: 55.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Flowers Westminster collects, uses, protects, and shares your personal data when you place orders with us in Westminster and the surrounding districts. We are committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. Please read this policy to understand how your personal data is handled whenever you interact with our services.

Scope

This policy applies to all customers placing orders with Flowers Westminster, whether through our website, by phone, or in person, in Westminster and surrounding districts. It covers all aspects of your interaction with us, including browsing, ordering, and post-order communication.

What Data We Collect

We collect and process different types of personal data to provide and improve our floral delivery and related services. The categories of data we collect include:

Identity Data: Full name, delivery recipient's name.
Contact Data: Address, delivery address, phone number (if provided), and any relevant instructions for delivery.
Transactional Data: Details of your orders, order history, payment status (note: we do not store your full payment card details, only essential transactional references provided by payment processors).
Communication Data: Information you provide when contacting customer service, including feedback, queries, and complaint details.
Technical Data: IP address, browser type, device type, and cookies, when you interact online.
Marketing Preferences: Your marketing and communication preferences if you have opted in.

Lawful Basis for Processing

According to GDPR, personal data must be processed lawfully, fairly, and transparently. Flowers Westminster uses the following lawful bases for processing your data:

Contract: Processing is necessary to fulfil your order, manage payment and deliver flowers.
Legal Obligation: Certain data may be processed for compliance with legal requirements, such as accounting and tax purposes.
Legitimate Interests: For the ongoing improvement of our services, fraud prevention, and business operations, where these interests are not outweighed by your rights and interests.
Consent: For marketing communications, and where you have given explicit consent. You can withdraw your consent at any time.

How We Use Your Data

We collect your data to:

Process and deliver your orders and purchases
Communicate with you about your order, delivery, or account
Respond to your enquiries and provide customer support
Keep records for administrative and legal purposes
Improve and optimise our website and services
With your consent, inform you about offers, updates, and news

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, as required by law, or for legitimate business needs. The retention periods are as follows:

Order Details: Retained for up to 6 years for accounting, tax, and warranty purposes.
Contact and Communication Data: Retained as long as your customer relationship with us is ongoing or until you request deletion, unless legal obligation overrides.
Marketing Data: Retained until you unsubscribe or withdraw your consent.

After these periods, your personal data will be securely deleted or anonymised.

Data Processors and Third Parties

To provide our services efficiently, we work with trusted third-party suppliers and processors, who process personal data only under our instructions and in compliance with GDPR. These may include:

Payment service providers: For processing transactions securely. We do not store full payment details on our systems.
Delivery and courier partners: For facilitating the delivery of your flower orders.
IT and hosting providers: For website operation, data storage, and maintenance.
Marketing platforms: For sending you updates, with your permission.

All third-party providers are required to safeguard your data and use it only for the specified purposes. We do not share your data for unrelated purposes and do not sell your information to third parties.

International Data Transfers

We primarily store your data within the United Kingdom or the European Economic Area (EEA). If data is transferred outside this area, we ensure appropriate safeguards are in place in accordance with GDPR to protect your information to the same standard as required within the UK.

Security Measures

We take data security seriously and use appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, secure data storage, and regular reviews of security practices.

Your Rights

As a data subject under GDPR, you have the following rights regarding your personal data:

Right to Access: Obtain confirmation of whether we process your data and access to that data.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data, where legally permissible.
Right to Restrict Processing: Request that we limit processing of your data in specific circumstances.
Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format and transfer it to another controller.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time for processing based on consent.

Right to Lodge a Complaint:

We will respond to your requests as required by law, and may need to verify your identity before processing certain requests.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available upon request or on our website. Please review this policy regularly for updates.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through the channels provided on our website or as indicated on your order confirmation.