Privacy Policy for Flowers West Hampstead

Introduction

This Privacy Policy sets out how Flowers West Hampstead collects, processes, stores, and protects personal information about our customers in accordance with the General Data Protection Regulation (GDPR) and all other applicable data protection laws. This policy applies to all individuals who place orders with Flowers West Hampstead, whether they are located in West Hampstead or the surrounding districts.

What Data We Collect

To provide you with our services, we may collect, use, store, and transfer the following types of personal data about you:

  • Identity Data: Full name, title, and contact details
  • Contact Data: Billing address, delivery address, phone numbers (where provided), and postal codes
  • Order Data: Information about floral orders placed, including product details, occasion, and special requests
  • Payment Data: Transaction data provided for payment processing, though we do not store payment card information ourselves but use secure third-party providers
  • Communications Data: Records of communication via telephone, online forms, or messages, including feedback and complaints
  • Analytical Data: Aggregated, anonymised usage and browsing data to help improve our website and services

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. We process your data on the following grounds:

  • Contractual Necessity: To fulfil and manage your flower orders and deliver our services to you
  • Legal Obligation: To comply with laws and accounting requirements, including maintaining records for tax purposes
  • Legitimate Interest: To improve our services, handle queries or complaints, and communicate with our customers about their orders
  • Consent (where applicable): For optional direct marketing communications. When required, we will obtain your explicit consent, which can be withdrawn at any time

Data Retention

We retain personal data only as long as is necessary for the purposes for which it was collected, including for the fulfilment of orders, customer service, legal, accounting, or reporting requirements. Typically:

  • Order and personal data are stored for up to six years following your most recent interaction for accounting and auditing purposes
  • Marketing preferences are retained until you withdraw consent or opt out
  • Aggregated analytics data is kept in anonymised form

After the relevant retention period, your personal information is securely deleted or irreversibly anonymised.

Data Processors

To provide our services efficiently and securely, we share your information only with trusted third-party service providers (data processors) who act on our instructions and are bound by contract to keep your information confidential. These include:

  • Payment gateway providers, to process card and digital payments
  • IT service providers, for site hosting, technical support, and cloud storage
  • Delivery partners, for accurate order fulfilment and logistics
  • Professional advisors, such as accountants or auditors (when required for compliance)

All third-party processors are required to comply with data protection regulations and are not permitted to use your personal data for any purpose other than the specific service they are providing to Flowers West Hampstead.

How We Secure Your Data

Flowers West Hampstead takes your privacy seriously and has implemented technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include regularly reviewed access controls, secure storage solutions, and staff training. In the event of a data breach, we have protocols in place to notify affected individuals and authorities as required by law.

User Rights

Under GDPR, you have the following rights regarding your personal information:

  • Access: The right to request a copy of the personal data we hold about you
  • Rectification: The right to request corrections of any inaccurate or incomplete information
  • Erasure: The right to request deletion of your data under certain circumstances ("right to be forgotten")
  • Restriction: The right to restrict our processing of your data in certain situations
  • Data Portability: The right to request your data is provided to you or a third party in a structured, commonly used, machine-readable format
  • Objection: The right to object to processing, particularly in relation to direct marketing
  • Withdrawal of Consent: If we process your information based on consent, you may withdraw your consent at any time

If you wish to exercise any of these rights, please contact us using the details provided on our official website or in store. We may require you to verify your identity before complying with your request.

Policy Updates

We regularly review and update this Privacy Policy to ensure ongoing compliance with data protection laws and best practices. The latest version of our Privacy Policy will always be available on our website or available in-store. We recommend reviewing this policy periodically for any changes.

Contact and Complaints

If you have questions about this Privacy Policy or concerns about how we handle your personal information, please get in touch through the contact details provided in-store or on our website. You also have the right to lodge a complaint with the relevant data protection authority if you believe the handling of your personal data infringes applicable laws.

Scope of Policy

This Privacy Policy applies to all customers placing orders with Flowers West Hampstead, whether for delivery or collection, in West Hampstead and the surrounding districts.