Flowers Catford GDPR Privacy Policy

Introduction

This Privacy Policy describes how Flowers Catford collects, uses, and protects the personal information of its customers. It applies to everyone who places an order for Flowers Catford services in Catford and the surrounding districts. Flowers Catford is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and relevant data protection laws.

What Data We Collect

When you place an order with Flowers Catford, we collect personal data directly from you to process and fulfil your order. The types of personal data we may collect include:

  • Identification Data: Name and, if applicable, company details
  • Contact Information: Delivery address, billing address, telephone number
  • Order Details: Information regarding your order, preferences, and instructions
  • Payment Information: Such as your payment method details (e.g., credit/debit card information), though payment processing is handled securely by our payment processors and we do not store full card numbers on our systems
  • Communications: Any correspondence you have with us, including notes relating to your orders and customer service interactions
  • Website Usage Information: When you browse our website, certain technical information (such as IP address, browser type, device used, and cookies) may be collected automatically to assist with website functionality and analytics

Lawful Basis for Processing Your Data

We process your personal data under one or more lawful bases as defined by the UK GDPR:

  • Contractual Necessity: To fulfil our contract with you when you place an order (processing orders, delivering flowers, taking payment, communicating order status)
  • Legal Obligation: To comply with our legal obligations (tax, accounting, regulatory compliance)
  • Legitimate Interests: To pursue our legitimate business interests, such as improving customer service, internal administration, and preventing fraud, provided these interests are not overridden by your rights
  • Consent: Where required, for example, if you opt-in to receive marketing messages (you may withdraw consent at any time)

How We Use Your Data

Your personal data is primarily used for the following purposes:

  • Processing your order and delivering flowers to you or your chosen recipient
  • Communicating with you about your order or responding to your queries
  • Improving and managing our services and website
  • Fulfilling our accounting, reporting and record-keeping obligations
  • Conducting analytics to help us improve our products and services (using aggregated or anonymised data where possible)
  • Sending service-related or, with your explicit consent, marketing communications

Data Retention

Flowers Catford retains your personal data only for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general:

  • Order records and associated personal details are retained for up to seven years to comply with legal obligations (such as tax and accounting regulations)
  • Customer accounts, communications, and preferences are retained for as long as your account remains active, or until you request deletion, subject to our legal and contractual obligations
  • Aggregate analytics and statistical data may be retained for a longer period, but this is anonymised and cannot be linked back to individuals

Third-Party Processors

We may engage third-party service providers (known as "processors") to carry out specific tasks on our behalf. These include:

  • Payment Processors: For secure processing of your card payments (we never store your complete card details)
  • Delivery Partners: For delivering flowers to your specified address
  • IT and Website Support Providers: For managing our website, customer relationship management, and data storage
  • Analytics Providers: For understanding website usage and performance

All third-party processors are selected carefully and bound by contracts that require them to implement appropriate data protection safeguards and only use your information as instructed by us.

Your Rights Under GDPR

You have a number of legal rights in relation to your personal data under the UK GDPR, including:

  • Right of Access: You can request details of the personal information we hold about you
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete information
  • Right to Erasure: You may request deletion of your personal data where there is no good reason for us to keep it
  • Right to Restrict Processing: You can request limits on how we use your personal data
  • Right to Data Portability: You can ask for a copy of your data in a machine-readable format
  • Right to Object: You can object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Where we rely on consent (such as for marketing), you can withdraw it at any time
  • Right to Lodge a Complaint: You have the right to complain to the relevant supervisory authority if you believe your data protection rights have been breached

If you wish to exercise any of these rights, please contact us with details of your request. We may ask you to provide proof of identity to ensure security before fulfilling your request.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. This includes restricting access to personal information, employing secure servers, using encryption where appropriate, and regularly reviewing our data protection processes and contracts with our service providers.

International Data Transfers

Your personal data is primarily stored and processed within the UK. If any third-party providers process your data outside the UK or EEA, we will ensure appropriate safeguards are in place in accordance with data protection law (such as approved standard contractual clauses).

Policy Updates

Flowers Catford may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be available via our website. If material changes are made, we will clearly indicate this so that you remain informed.

Contact & Questions

If you have questions about this Privacy Policy or how Flowers Catford processes your personal data, please use our website contact form or contact us via your account dashboard. We are committed to responding promptly to any privacy-related concerns.