Flowers Chalk Farm Privacy Policy

Introduction

At Flowers Chalk Farm, we are committed to protecting the privacy and personal data of our valued customers. This Privacy Policy explains how and why we collect, use, and protect your personal information. It applies to all customers placing orders with Flowers Chalk Farm from Chalk Farm and the surrounding districts. Please read this policy carefully to understand your rights and our obligations to you under the General Data Protection Regulation (GDPR).

What Personal Data We Collect

When you place an order or interact with Flowers Chalk Farm, we may collect certain information about you. The personal data we collect includes:

• Contact Information: Full name, delivery address, billing address, and contact details (such as phone number, where provided).
• Order Details: Details of the products you order, delivery instructions, and transaction information.
• Payment Information: We process payments securely, and limited card or payment details may be handled by our payment processors. We do not store complete card details on our servers.
• Correspondence: Any communications you have with us, which may include queries, complaints, or feedback.
• Technical Data: When you visit our website, we automatically collect technical data such as IP address, browser type, device information, and website usage statistics through cookies or analytics tools.

Lawful Bases for Processing Data

We only collect and process your personal data when there is a lawful basis to do so under the GDPR. These bases include:

• Contractual Necessity: Most of the data we collect is required to process and fulfil your order. Without this information, we would not be able to complete your transaction.
• Legal Obligation: We process certain information to comply with legal and regulatory requirements, such as taxation or accounting rules.
• Legitimate Interests: We may process your data for our legitimate business interests, such as improving our service, responding to questions or feedback, or preventing fraud. In these cases, our interests do not override your rights and freedoms.
• Consent: Where we rely on your consent (for example, for certain types of direct marketing), you can withdraw your consent at any time.

How We Use Your Information

Your data is used for the following purposes:

• To process and deliver your orders, including communication about your purchase and delivery.
• To process payments securely via trusted payment processors.
• To communicate with you regarding your order, queries, or complaints.
• To monitor and improve our website and services.
• To comply with legal, regulatory, or accounting obligations.
• To send you information about our services, updates, or promotions where you have given your consent.

Retention of Your Data

We only retain your personal information for as long as is necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. The duration for which we retain your data is based on the following criteria:

• Orders and Transactions: Data related to your orders may be kept for up to seven years to ensure compliance with tax and accounting requirements.
• Marketing Data: Data used for marketing purposes will be retained until you withdraw your consent or unsubscribe from communications.
• Correspondence: Communications with you may be kept for a period required to resolve your enquiry or complaint, or as required by law.

Data Processors and Third Parties

We may engage trusted third parties or processors to assist in the operation of our service, including payment processing and website hosting. These third parties act on our behalf and are contractually obliged to comply with applicable data protection laws and manage your data securely. They only process your data as necessary for providing the relevant services to us, in line with this Privacy Policy.

Where required, your data may also be shared with regulatory authorities, government bodies, or law enforcement agencies, but only where the law permits or requires us to do so.

Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These include secure server environments, encryption, regular security reviews, and strict limitations on access to your information.

Your Rights Under GDPR

Under the GDPR, you have a number of important rights regarding your personal data. These include:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: If any data we hold about you is incorrect or incomplete, you can ask us to correct it.
• Right to Erasure: In certain circumstances, you can request the deletion of your data, also known as the 'right to be forgotten.'
• Right to Restrict Processing: You have the right to ask us to restrict the processing of your data in specific situations.
• Right to Data Portability: You can request your data in a portable format for your own use or transfer to another provider.
• Right to Object: You have the right to object to the processing of your data, particularly where processing is based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where we process your data based on your consent, you can withdraw this consent at any time.

If you wish to exercise any of these rights, please contact us using the details provided on our website. We will respond to your request within the timeframes stipulated by law and may require verification of your identity.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The most recent version will always be published on our website. Please check this page regularly for any updates.

Contact and Complaints

If you have any questions, concerns, or requests regarding how we process your personal data, or if you wish to make a complaint, please contact us using the information available on our official website. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

This policy is effective as of June 2024 and applies to all customers placing orders with Flowers Chalk Farm in Chalk Farm and surrounding districts.