Privacy Policy: Your Data, Your Rights at Flowers Slough

Introduction

At Flowers Slough, we are dedicated to protecting and respecting your personal data. This Privacy Policy sets out how we collect, use, and safeguard your information when you place an order with Flowers Slough, whether you are located in Slough or the surrounding districts. Our practices are fully compliant with the General Data Protection Regulation (GDPR) and other relevant data protection laws. Please read this policy carefully to understand our approach and your rights regarding your personal data.

Who This Policy Applies To

This Privacy Policy applies to all Flowers Slough customers placing orders from Slough and the surrounding districts. It covers all personal data collected when you interact with our services, make a purchase, or communicate with us.

What Data We Collect

To facilitate our service and ensure a quality customer experience, we may collect and process the following types of personal data:

• Identity Data: Your name, and, where necessary, title.
• Contact Data: Delivery address, billing address, phone numbers, and, where applicable, email addresses.
• Transaction Data: Details of Flowers Slough products you have ordered, purchase date, and payment confirmations (note we do not store full payment card details; these are processed securely by our payment providers).
• Order & Delivery Instructions: Special requests or personalised messages for recipients.
• Technical and Usage Data: IP address, browser type, device information, and website usage details collected through cookies (for further information on cookies, please refer to our separate Cookie Statement).

How and Why We Use Your Data (Lawful Bases)

Under GDPR, we must have a legal basis to process your personal data. The most common bases relevant to Flowers Slough are:

• Performance of a Contract: We process your information to fulfil your flower order, handle delivery, and process payments.
• Legal Obligation: In certain circumstances, we may have to process your data to comply with legal or regulatory requirements.
• Legitimate Interests: We may use your data to improve our products and services, prevent fraud, maintain security, and manage our relationship with you, where these interests are not overridden by your rights or interests.
• Consent: In some instances, such as sending marketing communications, we rely on your explicit consent. You have the right to withdraw this consent at any time.

How We Use Your Data

We use your data to:

• Process and deliver your Flower Slough orders
• Communicate with you about your order or any issues that arise
• Respond to your enquiries or feedback
• Personalise your service or product experience
• Comply with our legal obligations
• Inform you (subject to consent) about new products or special offers that may interest you

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order information and customer communications are typically retained for a period consistent with our legal obligations and our need to resolve disputes or enforce agreements. After these retention periods, your data will be securely deleted or anonymised.

Data Sharing and Processors

Flowers Slough may share your personal data with trusted third-party service providers, known as "processors", who are engaged to support our business activities. Such processors may include:

• Delivery partners for fulfilling and tracking orders
• Payment providers for secure transaction processing
• IT service companies providing tools for hosting, support, or customer management
• Professional advisers, where legally required

All third-party processors are bound by confidentiality and data protection obligations, and we ensure appropriate measures are in place to protect your data. We do not sell, rent, or trade your personal information to other companies for commercial purposes.

International Data Transfers

Your data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). Should your data be transferred outside of these countries, we will ensure appropriate safeguards (such as standard contractual clauses) are implemented to guarantee your privacy rights remain protected.

Your Rights Under GDPR

As a data subject, you have several important rights. You can:

• Access Your Data: Request a copy of personal data we hold about you.
• Correct Your Data: Ask us to rectify any incomplete or inaccurate information.
• Erase Your Data: Request deletion of your data where there is no lawful reason for us to retain it.
• Restrict Processing: Ask us to limit the way we use your personal data in certain cases.
• Data Portability: Request transfer of your data to another service provider in a structured, commonly used format.
• Object to Processing: Object to certain uses of your data, such as direct marketing (if applicable).
• Withdraw Consent: Withdraw at any time where we rely on consent for processing.

To exercise your rights, please contact us using the information provided on our website. We will respond to all legitimate requests within one month.

Security of Your Data

We take the security of your personal data very seriously and use suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. Access to your data is limited to employees, agents, contractors, and other third parties who have a business need to know, and are subject to confidentiality duties.

Changes to This Privacy Policy

We may update or amend this Privacy Policy from time to time to reflect changes to our practices or legal requirements. When we do, we will indicate the date of revision at the end of the policy. Please review it regularly to ensure you are informed of how your data is protected.

Contacting Us

If you have any questions about this Privacy Policy or how Flowers Slough handles your personal data, please get in touch via the contact details on our website. We are committed to addressing your queries and concerns in a timely manner.

Last updated: June 2024