Flowers Bankside Privacy Policy

Our Commitment to Your Privacy

At Flowers Bankside, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Flowers Bankside from Bankside and neighbouring districts.

What Data We Collect

When you order products or interact with Flowers Bankside, we collect personal information for the sole purpose of fulfilling and enhancing your customer experience. The data collected includes:

• Identity Data: Name, billing address, and delivery address.
• Contact Data: Telephone number and, if provided, other means of contact such as alternate numbers.
• Order Data: Details of orders placed, delivery instructions, and transaction records.
• Payment Data: Payment method information (note: payment card details are processed securely through third-party payment providers and never stored by Flowers Bankside).
• Correspondence: Any information you provide in communications with us, including special requests or queries related to your order.

Lawful Basis for Processing

Under GDPR, we are required to provide a lawful basis for processing personal information. Flowers Bankside relies on the following legal bases:

• Contractual Necessity: The majority of data is collected and used to fulfil your order or to take steps at your request before entering into a contract.
• Legal Obligation: We may need to process your data to comply with legal or regulatory requirements, such as tax or accounting obligations.
• Legitimate Interests: We process some data for legitimate business interests, such as improving our services, ensuring the security of our transactions, and handling customer queries, provided these interests are not overridden by your rights and freedoms.
• Consent: If we ever wish to use your data for additional purposes such as marketing, we will seek your explicit consent, which you can withdraw at any time.

How We Use Your Information

Your personal data is used only for specific purposes, including:

• Processing and delivering your orders, including providing delivery updates.
• Responding to your enquiries, complaints, or requests for support.
• Ensuring efficient processing of payments through authorised third-party providers.
• Fulfilling legal, regulatory, or tax obligations.
• Improving our products and services, based on order trends and customer feedback.

Data Retention Periods

Flowers Bankside retains your personal data only as long as necessary to fulfil the purposes for which it was collected or as required by law. Our retention periods are as follows:

• Order Information: Retained for up to 7 years to satisfy accounting and legal requirements.
• Contact Information: Retained alongside order data to ensure we can respond to any legal or customer service queries post-delivery.
• Payment Data: Not retained by us; processed directly by secure payment providers.
• Correspondence: Held for up to 2 years following the closure of an enquiry to ensure resolution and accountability.

Once retention periods expire or data is no longer needed, it is securely deleted or anonymised.

Third-Party Processors

Flowers Bankside uses trusted third-party service providers ("processors") to enable smooth order processing, payments, and deliveries. These may include:

• Payment processors for secure transactions.
• Delivery partners to ensure successful fulfilment of your order.
• IT service providers who help us manage our ordering and communications systems.

All third-party processors are contracted to comply fully with GDPR obligations and handle your data confidentially and securely. They are authorised to process your data only to the extent necessary to perform their functions in servicing your Flowers Bankside order.

Your Data Protection Rights

Under the GDPR, you have several rights regarding your personal data. These include:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You may ask us to delete personal data where there is no good reason for us to continue processing it.
• Right to Restrict Processing: You have the right to ask us to suspend processing of your personal data under certain circumstances.
• Right to Data Portability: You may request the transfer of your personal data to another party in a structured, commonly used electronic format.
• Right to Object: You can object to our processing of your data where we are relying on a legitimate interest, provided there are grounds relating to your particular situation.
• Right to Withdraw Consent: If you have provided consent for data processing, you have the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

If you wish to exercise any of your rights, please contact us using the details provided on our website or at our physical location in Bankside.

Data Security

We have put in place appropriate technical and organisational measures to safeguard your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. All employees and processors handling customer data are trained in data protection and are committed to maintaining confidentiality.

Should a data breach occur that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.

Policy Applicability and Updates

This policy applies to all personal data collected and processed in connection with orders placed by customers from Bankside and surrounding districts. We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data handling practices. When we do, we will communicate any significant changes in an appropriate manner.

We encourage you to regularly review this Privacy Policy to stay informed about how we protect your personal data.

Contact Information

If you have any questions about this Privacy Policy or how your personal information is handled, you can contact us in person at our Bankside location or through the communication channels provided on our website. We are always happy to address any concerns or requests you may have regarding your data.