Privacy Policy for Flowers Yeading Orders

Name: PINK POP
Brand: Flowers Yeading
Price: 72.00 GBP
Availability: InStock

About This Privacy Policy

This Privacy Policy describes how Flowers Yeading collects, processes, and stores personal data when you place an order with us from Yeading and surrounding districts. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy explains the categories of information we collect, our reasons for processing, data retention practices, processors we use, and your data protection rights.

Who This Policy Applies To

This Privacy Policy applies to every individual who places an order with Flowers Yeading, whether for delivery or collection, from Yeading or the nearby areas. By placing an order with us, you acknowledge that your personal data will be processed in accordance with this policy.

The Data We Collect

When you order flowers from us, we may collect the following categories of personal data as necessary for the order process:

Identity Data: Your name and the recipient's name (if applicable).
Contact Data: Address, phone number, and, where provided, email address for order confirmations and delivery.
Order Details: Information about the floral products selected, delivery instructions, and any personalised messages included with an order.
Payment Data: Payment-related information (such as billing address and confirmation of payment method), processed securely by third-party payment providers. We do not store full payment card details.
Technical Data: IP address, device information, and usage data collected when you interact with our website for security and analytics purposes.

Lawful Basis for Data Processing

We process your personal data under the following lawful bases as required by the GDPR:

Contractual Necessity: The majority of data we collect is required to enter into or fulfil our contract with you for floral arrangements and delivery (Article 6(1)(b)).
Legal Obligation: We may process your information to comply with relevant legal obligations, such as retaining transaction records for tax or regulatory purposes (Article 6(1)(c)).
Legitimate Interests: Where necessary, we may process data to pursue our legitimate business interests, such as improving our service, protecting against fraud, or ensuring the security of our website (Article 6(1)(f)).
Consent: Where required by law (for example, direct marketing purposes), we will only process your data after obtaining your explicit consent. You can withdraw this consent at any time.

Retention of Your Data

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our general retention periods are:

Order and delivery information: retained for up to 7 years to comply with tax and business record obligations.
Payment data: stored only by our payment processors, as detailed below. We do not retain full card numbers or CVV codes.
Marketing preferences: retained until you withdraw consent or request erasure.
Website usage analytics: retained for up to 2 years for service improvement and security monitoring.

After the retention period expires, your data will be securely deleted or anonymised.

Data Processors and Third Parties

We may share your personal data with third-party service providers (processors) only as necessary to complete your order or improve our services. Our key categories of processors are:

Payment Processors: Securely handle your payment transactions and process refunds. We only receive payment confirmations and do not store sensitive card details.
Delivery Partners: If we use external couriers, they are provided with necessary delivery information (recipient name, address, and phone number).
IT and Cloud Service Providers: To host our ordering platform, provide security, perform analytics, and ensure communications delivery.
Professional Advisers and Legal Authorities: Only where necessary and in accordance with the law (for example, for tax compliance or fraud investigation).

All data processors are contractually obliged to safeguard your information and to process it only as instructed by Flowers Yeading. We do not sell your personal information to third parties.

User Data Protection Rights

As a customer of Flowers Yeading, you have several rights relating to your personal data under the GDPR, including:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You have the right to correct inaccurate or incomplete information.
Right to Erasure: In certain circumstances, you can request that we delete your data.
Right to Restriction of Processing: You may ask us to limit how we use your personal data in certain situations.
Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to our processing your personal data under legitimate interest or for direct marketing purposes.
Right to Withdraw Consent: Where we rely on your consent for processing, you may withdraw that consent at any time with future effect.

To exercise any of these rights, please contact us using the details provided on our website. We will respond to all legitimate requests promptly and within the timeframes required by law.

International Transfers

We primarily process and store your data within the United Kingdom or European Economic Area (EEA). If any data transfer occurs outside this area (for example, by an IT service provider), we will ensure such transfers comply with GDPR, including use of Standard Contractual Clauses or other appropriate safeguards.

Data Security Measures

Flowers Yeading takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information from unauthorised access, loss, or misuse. Examples include data encryption, secure payment processing, regular system monitoring, and restricted access to sensitive information.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. We encourage you to review this policy periodically. Any substantial changes will be brought to your attention before they take effect, where required by law.

Contacting Flowers Yeading

If you have questions about this Privacy Policy, how we handle your personal data, or how to exercise your GDPR rights, please use the contact details listed on our website. We are committed to addressing any concerns or queries regarding your privacy and data protection promptly and transparently.