Our Commitment to Privacy at Flowers Great Bookham
Introduction
This Privacy Policy explains how Flowers Great Bookham (“we”, “us”, “our”) collects, uses, protects, and shares your personal data when you place orders with us in Great Bookham and surrounding districts. We are fully committed to safeguarding your privacy and handling your data in accordance with the UK General Data Protection Regulation (GDPR).
Scope of this Policy
This policy applies to customers who place flower orders with Flowers Great Bookham either directly or through our delivery service, covering Great Bookham and neighboring areas. By placing an order, you agree to the data practices described in this policy.
What Data We Collect
Depending on your interaction with us, we may collect and process the following categories of personal data:
- Identity Data: Full name, title
- Contact Data: Delivery address, billing address, phone number, and other contact details
- Order Data: Order details, purchase history, delivery instructions
- Payment Data: Payment method details (such as credit/debit card information or payment confirmation – please note that card details are securely processed by our payment processor and not stored by us directly)
- Correspondence: Records of emails, notes from phone calls, or messages relating to your order
Lawful Basis for Processing Personal Data
Flowers Great Bookham will only process your personal data if one or more of the following lawful bases apply:
- Contractual Necessity: To process your order and deliver products as per your request
- Legal Obligations: To comply with applicable laws (e.g., consumer protection, tax records)
- Legitimate Interests: To improve our services, handle inquiries, and maintain records of transactions, provided these interests do not override your rights
- Consent: When you provide explicit consent for direct marketing communications (which you can opt out of at any time)
How We Use Your Personal Data
Your data is used for the following purposes:
- Processing and delivering your orders, including delivery to recipients
- Managing payments and refunds
- Communicating with you about your order, our products, or services
- Responding to your inquiries or feedback
- Complying with legal and regulatory obligations
- Improving our products, services, and customer experience
Data Retention
We retain your personal data only for as long as is necessary for the purposes set out in this policy, including for legal, accounting, or reporting requirements. Typically, customer order information is retained for up to seven years to fulfil our obligations under UK tax laws and for recordkeeping. Once no longer required, your data is securely deleted or anonymized.
Processors and Sharing of Personal Data
Flowers Great Bookham may share your data with selected third parties acting as processors for specific activities, such as:
- Payment Processors: To handle transactions securely
- Delivery Partners: For efficient product delivery to your chosen address
- IT Service Providers: For system maintenance, hosting, and support
All processors are obliged by contract to follow GDPR data protection requirements. Personal data is not sold or passed on for marketing purposes without your explicit consent. We may disclose your data if required by law or to protect the rights, property, or safety of our business or others.
Data Security
We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or theft. These measures include secure servers, encrypted communications, restricted access, and regular system reviews.
Your Rights under GDPR
You have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Ask us to correct any inaccurate or incomplete data
- Right to Erasure: Request deletion of your data where applicable
- Right to Restrict Processing: Ask us to limit certain data uses in specific circumstances
- Right to Data Portability: Receive your data in a commonly used format for transfer to another provider
- Right to Object: Object to data processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data
- Right to Lodge a Complaint: Make a complaint to the UK Information Commissioner’s Office (ICO) if you feel your data rights have been infringed
Updates to this Privacy Policy
We may review and update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The latest version will always be published on our website with a date of revision indicated.
Contacting Flowers Great Bookham
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us using the details provided on our website or by written correspondence to our registered address. We will respond promptly in accordance with our legal obligations.
