Privacy Policy for Battersea Flowers Customers

Introduction

This Privacy Policy outlines how Battersea Flowers collects, uses, and protects your personal data. It is designed to comply with the General Data Protection Regulation (GDPR) and applies to all customers placing orders with Battersea Flowers from Battersea and nearby districts. By using our services, you acknowledge that you have read and understood this policy.

Scope of This Policy

This policy is applicable to all individuals and organizations who place orders for flowers, gifts, and any related services with Battersea Flowers within Battersea and its surrounding districts. This includes both online and offline customers, such as those ordering in person, by phone, or through our website.

Personal Data We Collect

Depending on your interactions with Battersea Flowers, we may collect and process the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and postcode.
• Order Information: Items ordered, delivery instructions, message card notes, and purchase history.
• Payment Details: Method of payment and partial card details (last four digits) if required for transaction verification. Note: We do not store complete payment card data.
• Communication Data: Records of communications between you and Battersea Flowers regarding orders, queries, or complaints.
• Technical Information: If you use our website, we may collect IP addresses, device identifiers, and information about how you navigate our website (using cookies and similar technologies).

Lawful Basis for Processing

We process your personal data based on the following lawful bases under the GDPR:

• Performance of a Contract: Most data processing is necessary to fulfill your order, including taking payment, arranging delivery, and communicating with you regarding your purchase.
• Legal Obligation: We may process certain information as required by applicable laws, such as maintaining financial records for tax purposes.
• Legitimate Interests: To improve our services, handle customer enquiries, prevent fraud, or market directly to you with offers or updates (unless you have opted out).
• Consent: Where you have provided explicit consent, for example, subscribing to our marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used exclusively for the purposes for which it was collected, including:

• Processing and fulfilling your flower and gift orders.
• Communicating with you about the status of your orders or responding to your queries.
• Processing payments and handling refunds or cancellations.
• Delivering flowers and gifts to the correct recipient and address.
• Keeping internal records for accounting and legal compliance.
• Improving our website, services, and customer experience.
• Sending you relevant updates and offers, with your consent when required.

Disclosure to Processors and Third Parties

We may share your personal data with third-party service providers (processors) who assist us in delivering our services. These trusted partners include:

• Payment processing services for secure and verified transactions.
• Third-party delivery and courier companies for order fulfillment.
• IT service providers who manage our website, databases, and communications.
• Professional advisors where required for legal, tax, or accounting services.

All processors are required to adhere to data protection laws, and only process your data for specified purposes on our behalf. Your personal information is not sold, rented, or traded to any third party for marketing or other purposes.

International Data Transfers

In most cases, your personal data will be stored and processed within the United Kingdom or the European Economic Area (EEA). Where it is necessary to transfer data outside these regions, we ensure that adequate safeguards are in place in accordance with the GDPR, such as standard contractual clauses.

Data Retention

Your personal data is retained only for as long as necessary for the purposes it was collected, including:

• To fulfill your orders and deliver our services.
• To comply with legal, accounting, or tax obligations (generally up to seven years for financial records).
• To handle any customer queries, complaints, or disputes.

After the relevant retention period, your data is securely deleted or anonymized. If you have consented to receive marketing communications, we may retain your contact information until you withdraw your consent.

Security of Your Data

We take the protection of your personal data seriously and have implemented appropriate technical and organizational measures to safeguard it against unauthorized access, loss, misuse, modification, or disclosure.

Your Rights Under the GDPR

You have various rights under the GDPR in relation to your personal data, including:

• Right of Access: You can request information about the personal data we hold about you.
• Right to Rectification: You can ask us to correct or update inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data, subject to our legal obligations.
• Right to Restrict Processing: You can request that we restrict how we use your data in certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format for use elsewhere.
• Right to Object: You can object to the processing of your data for direct marketing or other purposes based on legitimate interest.
• Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact our management through the contact details provided on our website or in your order confirmation. We may need to verify your identity before processing your request.

Children’s Privacy

We do not knowingly collect or process personal data from children under the age of 16. If we become aware that we have inadvertently collected such data, we will remove it from our records promptly.

Changes to This Policy

We reserve the right to amend or update this Privacy Policy from time to time to reflect changes in the law or our practices. The most current version will always be available on our website, and where appropriate, we will notify you of important changes by other means.

Contact Us

If you have any questions, concerns, or wish to exercise your data protection rights relating to this policy or how we process your personal data, please refer to the contact information available on our website or in your order confirmation notice.