Your Data and Privacy at Flowers Isleworth

Flowers Isleworth Customer Data Privacy Statement

Scope of This Privacy Policy

This Privacy Policy explains how Flowers Isleworth ('we', 'us', or 'our') collects, uses, stores, and secures your personal data as part of providing flower ordering services to customers in Isleworth and surrounding districts. By placing an order with Flowers Isleworth, you agree to the processes described within this statement, which adheres fully to the General Data Protection Regulation (GDPR).

What Data We Collect

In the course of our service provision, we collect personal data to fulfill your orders and offer a smooth customer experience. The information we may collect includes:

Identity Data: Name, title
Contact Data: Delivery address, billing address, telephone number, and other contact details provided during the ordering process
Order and Transaction Data: Products ordered, order dates, payment status (but not your complete payment card details)
Payment Data: Partial payment card details as handled by payment service providers, to the extent necessary for transaction processing
Correspondence: Records of communications with you pertaining to your order or support queries
Technical Data: IP address, browser type, and cookie information, where applicable through website analytics

Lawful Basis for Processing Personal Data

Your personal data is processed under the following lawful bases as defined by the GDPR:

Contractual Necessity: To process and deliver your flower orders, and to communicate order confirmations or delivery updates
Legitimate Interests: For business management, record keeping, and improving our services, provided that such uses do not override your fundamental rights
Legal Obligations: To comply with any requirements arising from applicable law or tax regulations
Consent: Where required, such as for marketing activities (we seek your explicit consent before sending promotional communications)

How We Use Your Information

Your personal data is used for the following purposes:

To process, confirm, and deliver your orders efficiently
To communicate with you regarding your purchases and respond to your enquiries
To manage payments and process refunds, where applicable
To maintain internal records for accounting and business analysis
To comply with regulatory requirements and resolve any disputes
To improve our services and customer experience (for example, by reviewing feedback or purchasing trends)

We do not sell your personal information to third parties or use it for unrelated purposes without your consent.

Data Retention Policy

We retain your personal information only for as long as it is necessary to fulfill the purposes for which it was collected, including for satisfying legal, accounting, or reporting obligations. Typically:

Order and contact data are kept for up to 7 years, to comply with tax laws and support potential queries relating to previous orders
Marketing consent data is retained until you withdraw your consent
Technical and cookie data are stored in accordance with our Cookie Policy and relevant legislation

After these periods, your data will be securely deleted or anonymised for statistical purposes.

Our Data Processors

Your information may be shared with trusted third-party service providers ('processors') who assist us in delivering our services. These include:

Payment providers assisting with secure transaction processing
Certain delivery couriers involved in fulfilling your orders
Cloud service or data storage partners, for secure management of customer information
Website service providers, for hosting and maintaining our website functionality

All data processors are bound by contracts to act only according to our instructions, keep your data confidential and secure, and adhere to GDPR requirements. We do not allow processors to use your data for their own purposes.

Your Rights Under GDPR

You have the following rights regarding your personal data held by Flowers Isleworth:

Right to Access: Request a copy of your personal data we hold
Right to Rectification: Request the correction of inaccuracies in your data
Right to Erasure: Request deletion of your personal data, subject to conditions
Right to Restrict Processing: Request we stop processing your data in certain circumstances
Right to Data Portability: Obtain your information in a commonly used format and transfer it elsewhere
Right to Object: Object to processing based on legitimate interests, or to direct marketing
Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time

To exercise your rights, please contact us using the contact methods listed on our website or in store. We will respond to requests within one month as mandated by the GDPR.

Data Security

We take the security of your data seriously and have implemented appropriate technical and organisational measures to safeguard your information against unauthorised access, alteration, disclosure, or destruction. Access to customer data is limited to staff and partners who require it for the delivery of our services.

While we do our utmost to protect your data, please note that transmission of information over the internet can never be completely secure. If you have particular security concerns, please let us know and we will do our best to accommodate them.

Policy Updates and Contact

This Privacy Policy applies to all Flowers Isleworth customers in Isleworth and the surrounding districts. We may update this notice from time to time to reflect changes in our practices or relevant legislation. The current version will always be available in store and on our website.

If you have any questions, concerns, or wish to exercise your data protection rights, please refer to our official contact details on the website or approach a member of staff in store. If you are not satisfied with our response, you have the right to contact the supervisory authority for data protection in the United Kingdom.