Flowers Croydon GDPR Privacy Policy
Scope of This Privacy Policy
This Privacy Policy explains how Flowers Croydon collects, uses, shares, and safeguards your personal information as you place orders through Flowers Croydon in Croydon and the surrounding districts. The policy applies to all Flowers Croydon customers, whether ordering for delivery or collection. We are committed to protecting your data in accordance with the UK General Data Protection Regulation (GDPR).
What Personal Data We Collect
When you place an order with Flowers Croydon, visit our website, or communicate with us, we may collect and process the following categories of personal data:
- Identification Information: Name, address, and contact details (such as delivery address and telephone number if provided).
- Order Details: Records of your flower orders, delivery instructions, card messages, and any special requests you make.
- Payment Information: Limited payment transaction data (please note, all processing is performed through secure third-party payment processors; we do not store your full card details).
- Consent Records: Your communication preferences and any consent choices you give us (such as for marketing).
- Technical Information: Details about how you use our website and online services, including IP address, browser type, device details, and cookies, where applicable.
Lawful Basis for Processing Personal Data
Under GDPR, we must have a valid lawful basis to process your personal data. The bases we rely on are:
- Contractual necessity: Most of the information we collect is needed to fulfil your order, respond to your enquiries, and provide customer service.
- Legal obligation: We may need to retain certain data for tax, accounting, or regulatory reasons.
- Legitimate interests: We may process your data to improve our services, maintain security, or prevent fraud, provided such processing does not override your rights.
- Consent: Where required, for example, for marketing communications, we rely on your specific consent, which you may withdraw at any time.
How We Use Your Personal Data
We use the personal data we collect to:
- Process, fulfil, and deliver your flower orders.
- Contact you to confirm orders, answer queries, and keep you informed of delivery status or issues.
- Administer your account, if you choose to use one.
- Improve our products, services, and customer experience.
- Comply with legal and regulatory requirements.
- Send you marketing communications, offers, or updates where you have provided consent (which can be withdrawn at any time).
Data Processors and Sharing of Data
In order to deliver our services, we sometimes need to share your data with trusted third parties who process personal data on our behalf. These include:
- Payment processors: Secure providers who process your transactions for Flowers Croydon. We do not store or retain any full payment card details ourselves.
- Delivery partners: Couriers or drivers responsible for delivering your orders.
- IT and web service providers: Companies providing website hosting, cloud storage, or technical support.
All third-party processors are contractually obliged to handle your data securely and in compliance with GDPR. We do not sell or rent your information to any third parties. Data is only shared when strictly necessary to fulfil your order or comply with a legal obligation.
Data Retention and Storage
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- Order Records: Data related to transactions and purchases is usually kept for up to six years to comply with tax and legal obligations.
- Account Details: If you register for an account, we keep your data until you request deletion or you no longer use the service.
- Marketing Data: We retain your contact and preference details until you withdraw consent or opt out of communications.
- Technical Data: Cookies and usage data are stored for periods consistent with our security and analytics needs, never longer than required.
Once your data is no longer required for the purposes it was collected, it is securely deleted or anonymised.
Your Data Protection Rights
Under GDPR, you have various rights regarding your personal information. These include:
- Right to access: You can request a copy of the personal data we hold about you.
- Right to rectification: You may ask to correct inaccurate or incomplete data.
- Right to erasure: Also known as the “right to be forgotten”, you can request deletion of your data where there is no lawful reason for us to continue processing it.
- Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
- Right to data portability: You can request that we transfer your data to you or another service provider.
- Right to object: You can object to our processing of your data when relied on legitimate interests or marketing.
- Right to withdraw consent: Where you have given consent, you can withdraw it at any time.
To exercise these rights, you may contact us using the details provided on our website or in-store. We will respond to all legitimate requests promptly and in accordance with GDPR requirements.
Security of Your Data
We implement appropriate technical and organisational measures to secure your personal data, including encryption, access controls, and regular staff training. We review our security measures regularly to ensure your data remains protected from unauthorised access, loss, or misuse.
International Data Transfers
Flowers Croydon does not routinely transfer customer data outside the UK or the European Economic Area (EEA). If any data transfer takes place, we will ensure it is protected by appropriate safeguards as required by UK GDPR.
Policy Updates and Changes
We reserve the right to update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection best practices. Significant changes will be highlighted on our website or communicated directly to affected customers when possible. The effective date will always be shown at the top of the policy.
How to Contact Us
If you have any questions, concerns, or wish to exercise your rights in relation to your personal data, you can contact us using the information shown on the Flowers Croydon website or by visiting our store directly.