Flowers Alperton GDPR Privacy Policy

Scope of This Privacy Policy

This Privacy Policy explains how Flowers Alperton processes personal data when you place orders with us, either for yourself or on behalf of someone else. This policy applies to all customers making purchases from Flowers Alperton in Alperton and the surrounding districts. We are committed to safeguarding your data in line with the UK General Data Protection Regulation (GDPR) and related legislation.

What Personal Data We Collect

Flowers Alperton collects specific personal information to facilitate ordering, delivery, and customer service. The types of data we collect include:

• Contact Information: Name, delivery address, billing address, and telephone number.
• Order Information: Details of items purchased, delivery instructions, and order history.
• Payment Information: Limited payment card information, processed securely by third-party providers. We do not store full card details ourselves.
• Communication Data: Any messages, notes, or information you provide when contacting us or completing feedback forms.
• Technical Data: Data such as IP addresses, device type, and browser information, collected when you interact with our website for security and optimisation purposes.

Lawful Basis for Processing

Under GDPR, we process your data only where we have a valid legal basis. For most activities, processing is necessary for the performance of a contract (fulfilling your order), for compliance with legal obligations, or for our legitimate interests (such as managing and developing our services). Specifically:

• Contract: We collect and process your information to carry out our contractual obligations—accepting and delivering your orders.
• Legal Obligation: Certain records must be retained for tax, accounting, and regulatory purposes.
• Legitimate Interests: We may use personal data for fraud prevention, service improvement, or providing customer support, where this does not override your rights and freedoms.
• Consent: Where required, for example in relation to marketing communications, we seek your explicit consent and you are free to withdraw it at any time.

How We Use Your Data

Flowers Alperton uses the personal data we collect only for the stated purposes. These include processing your orders, delivering products, communicating with you about your order or any enquiries, and maintaining our business records. Aggregated or anonymised data may be used to improve our services and for statistical reporting.

Data Sharing and Processors

We do not sell your personal data. In delivering our services, it may be necessary to share certain data with trusted third party processors such as:

• Payment Service Providers: Companies that process your payments securely on our behalf.
• Delivery and Logistics Partners: Only details essential to effect a delivery are shared.
• IT Service Providers: Providers supporting our website and internal systems for security and operation.
• Legal and Regulatory Authorities: Where required by law or to enforce our legal rights.

All processors and partners are subject to contract and required to safeguard your information in accordance with GDPR obligations.

Data Retention

We retain personal data for only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. In general:

• Order and transaction data is typically kept for up to six years to comply with revenue, accounting, and legal obligations.
• Contact and communication data may be stored for up to two years for customer support and service development.
• Data used solely for marketing will be stored until you withdraw your consent or opt-out.

All data is securely deleted or anonymised once the relevant retention period has expired.

International Data Transfers

Your personal data is generally stored and processed in the UK or the European Economic Area (EEA). If it is ever necessary to transfer your data outside of these locations, we will ensure appropriate safeguards are in place to maintain protection in line with GDPR requirements.

Your Rights Under GDPR

You have a range of rights in relation to the personal data we hold about you. These include:

• Access: The right to request a copy of personal data we hold.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The "right to be forgotten," allowing you to request the deletion of your data under certain conditions.
• Restriction: The right to restrict our processing of your personal data in certain circumstances.
• Data Portability: The right to receive personal data you have provided to us, in a structured, commonly used format, and have that data transmitted to another controller where technically feasible.
• Objection: The right to object to certain types of processing, such as marketing communications. You may opt out of marketing at any time.

If you wish to exercise any of these rights, please contact us using the channels provided on our website or in the materials you receive when you place an order. We will respond to all requests within the timeframes established by law.

Data Security

We implement a variety of security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure servers, encryption, regular security reviews, and access limitations to only those employees and partners who require your information to process your order.

Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect or process data relating to children. If you believe we have collected such data in error, please contact us promptly to arrange for its removal.

Policy Updates

This privacy policy is kept under regular review and may be updated from time to time to reflect changes in law, practice, or our services. Any changes will be published on our website with the effective date.

How to Contact Us

If you have any questions about this policy, our handling of your personal data, or wish to make a complaint, please refer to the contact details provided on our website or in your order paperwork. If you feel your concerns have not been resolved, you may also contact the UK Information Commissioner’s Office (ICO) for further information and support.