How De Beauvoir Town Flowers Handles Your Personal Data

De Beauvoir Town Flowers Privacy Policy

Introduction

This Privacy Policy explains how De Beauvoir Town Flowers collects, uses, stores, and safeguards the personal data of customers placing orders from De Beauvoir Town and the surrounding districts. We are committed to protecting your privacy and ensuring that your personal information is handled in full compliance with the UK General Data Protection Regulation (GDPR).

Who This Policy Applies To

This Privacy Policy applies to all customers who place orders with De Beauvoir Town Flowers, whether online, over the phone, or in person, for deliveries or collections in De Beauvoir Town and the neighbouring areas.

What Data We Collect

We collect only the data necessary to process your order, provide excellent customer service, and fulfill our legal obligations. The types of data we may collect include:

Contact Information: Name, address (including delivery and billing addresses), and phone number.
Order Details: Items ordered, delivery instructions, order history, and preferences.
Payment Data: Card details or payment transaction reference numbers are processed securely via third-party payment processors; De Beauvoir Town Flowers does not store your full card details.
Correspondence: Any communications with us regarding orders, enquiries, or feedback.
Device Data: Basic details such as IP address and browser type, collected for security and analytics purposes when you use our website.

Legal Basis for Processing Your Data

We will only process your personal data where we have a lawful basis to do so under GDPR. The lawful bases relied upon include:

Performance of Contract: Processing is necessary to fulfill your flower order and provide related customer service.
Legal Obligation: We may be required to retain certain invoice or payment data to comply with tax or other regulatory requirements.
Legitimate Interests: Processing for our legitimate interests, such as improving our services and ensuring the security of our business and customers, provided these interests are not overridden by your rights.
Consent: Where we ask for your permission, for example, to send newsletters or marketing communications, you can withdraw this consent at any time.

How We Use Your Data

Your data is used exclusively for the following purposes:

Processing and fulfilling orders.
Communicating with you regarding orders, deliveries, or queries.
Improving our products and services.
Complying with legal requirements and defending our legal rights if necessary.
Sending marketing information, where you have opted in.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, as well as to meet our legal and regulatory obligations. Generally, order and correspondence data is kept for up to six years from the date of your last order, unless we have a continuing need (for example, ongoing customer support or legal requirements). Payment details handled through third-party processors are not stored by us. Where you have consented to receive marketing, we will retain your contact details until you withdraw your consent.

Processors and Third Parties

We may share your data with trusted processors who provide essential services required to fulfill your order or operate our business, including:

Payment processors handling your transactions securely.
IT service providers supporting our order systems and website.
Couriers or delivery services to deliver your orders.

All third-party processors are carefully selected, GDPR-compliant, and are required to uphold the security and confidentiality of your data. No data is sold to third parties. Your data will not be transferred outside the UK or European Economic Area unless adequate measures and safeguards, as set out in GDPR, are in place.

Your Rights as a Customer

Under GDPR, you have important rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccuracies in your data.
Right to Erasure: You can request the deletion of your data when it is no longer necessary for us to keep it, provided no overriding legal need exists.
Right to Restriction: You can ask us to restrict the processing of your data in certain circumstances.
Right to Data Portability: Where applicable, you can ask us to transfer your data to another provider.
Right to Object: You can object to our processing of your data based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data rights are not being respected.

How We Protect Your Data

We take data protection seriously and implement appropriate organisational and technical measures to safeguard your information against unauthorised use, loss, or disclosure. Access to personal information is restricted to those employees, agents, and contractors who need it to process orders or deliver services to you.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal or business changes. The updated policy will be made available on our website, and any significant changes will be clearly indicated.

Contact and Further Information

For any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us using the contact details provided on our website or at our shop. We are always happy to help clarify how your data is handled.