Flowers Holloway GDPR Privacy Policy

Introduction

At Flowers Holloway, your privacy and the security of your personal data is very important to us. This Privacy Policy sets out how and why we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers who place flower orders with Flowers Holloway from Holloway and the surrounding districts. Please take time to read this policy carefully to understand how we manage your personal data and your rights in this respect.

What Personal Data We Collect

The information we collect depends on the services requested and how you interact with us. Generally, we may collect the following data from our customers:

• Identification Data: Full name, delivery address, billing address.
• Contact Data: Phone number, other contact details provided at ordering.
• Order Information: Details of the flowers and products ordered, order history, recipient information, delivery preferences, and instructions.
• Payment Data: Limited payment method information (e.g., card type). Please note that card and payment processing is handled by secure third-party processors and we do not store your full payment card details.
• Customer Communications: Correspondence via forms, notes, or any feedback relating to your order or experience.
• Technical Data: Information collected through cookies or similar technologies related to your use of our website, including IP address and device details, subject to your browser settings.

Lawful Basis for Processing Your Data

Flowers Holloway processes your personal data under the following lawful bases as described by GDPR:

• Performance of a Contract: We require your personal data to process, confirm, and deliver your order, and to handle customer service inquiries.
• Legal Obligations: We may be obliged to retain and disclose certain information for taxation, accounting, or regulatory requirements.
• Legitimate Interests: Where appropriate, we process certain information to improve our services, maintain security, and manage our business operations, provided such interests are not overridden by your privacy rights.
• Consent: Where required, such as for non-essential cookies or marketing communications, we process your data only after obtaining your consent. You may withdraw your consent at any time.

How We Use Your Data

We use your personal data to:

• Process and manage your flower order(s).
• Deliver products to the recipient as per your instructions.
• Contact you in relation to your order, including confirmation, delivery updates, or to resolve any issues.
• Improve our customer experience and services through analysis of order trends and customer feedback.
• Meet our legal and regulatory obligations.
• Where you have consented, update you with news, offers, feedback requests, or promotions.

How We Store and Protect Your Data

Your personal data is held securely, using industry-standard technical and organisational measures to prevent unauthorised access, loss, or misuse. Our website and ordering systems employ security tools and protocols to ensure data integrity. Access to your information is limited to those staff and providers who need it to fulfill their duties.

Retention of Personal Data

We retain your personal data only for as long as is necessary for the purposes set out in this policy. Typically, order and delivery data is retained for up to six years to enable compliance with record-keeping obligations and resolve any potential disputes. Communications related to orders may be kept for a shorter duration, unless a longer period is necessary for legal reasons or business administration. Once your data is no longer needed, we ensure secure deletion or anonymisation.

Data Processors and Sharing Information

Flowers Holloway engages third-party service providers (“processors”) to assist in fulfilling your orders and maintaining our operations. These may include:

• Payment processors to securely manage payments.
• Certain delivery couriers or logistic partners for delivering your order.
• Professional advisors (e.g., accountants) and suppliers involved in standard business operations.
• Website or IT support services for technical maintenance and security.

All such partners are carefully selected and contractually committed to handling your data in compliance with GDPR. We do not sell your personal information to any third parties.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request access to a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete data we hold about you.
• Right to Erasure (‘Right to Be Forgotten’): You may request deletion of your data, subject to conditions where we have no overriding legal grounds to retain it.
• Right to Restrict Processing: You may request us to limit the ways we use your data in certain circumstances.
• Right to Data Portability: You may request your data be provided to you, or to another controller, in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to us processing your data where we rely on legitimate interests, or for direct marketing purposes.
• Right to Withdraw Consent: Where consent is the lawful basis (e.g., for marketing), you may withdraw it at any time.

To exercise any of your rights under GDPR, please contact us using the methods provided on our website or in our store. We will respond to all valid requests as required by data protection laws.

Policy Updates

This Privacy Policy may be reviewed and updated periodically to reflect changes in our practices or legal requirements. We encourage you to check this page for the most up-to-date version whenever you place an order or use our services.

Contact and Further Information

If you have any questions about this policy, your data, or how we handle your information, please reach out to our team via the contact options listed on our official website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data rights have been infringed.

Thank you for trusting Flowers Holloway with your order. Your privacy and satisfaction are at the heart of what we do.