Flowers Beddington Privacy Policy Overview

Our Commitment to Your Privacy

At Flowers Beddington, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you place an order with us. This policy applies to all customers placing orders with Flowers Beddington from Beddington and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and all applicable UK data protection laws.

Information We Collect

When you place an order or interact with Flowers Beddington, we may collect the following categories of personal data:

• Identity Data: Name, title, and contact information such as delivery address.
• Contact Data: Phone number, billing and delivery address details (except where not provided).
• Order Data: Details of products ordered, payment methods (note: we do not store payment card details), preferences, and messages related to orders.
• Communication Data: Any correspondence or feedback shared with us regarding orders or services.

We do not intentionally collect sensitive personal data or data relating to children.

Lawful Basis for Processing

Flowers Beddington only uses your personal information where the law allows us to. The lawful bases under GDPR for collecting and processing your data are:

• Contractual Necessity: To process and fulfil your orders, send order confirmations, arrange delivery, and manage customer queries or complaints.
• Legal Obligation: To comply with regulations such as taxation and record-keeping requirements.
• Legitimate Interests: To improve our services, prevent fraud, and manage business operations, provided these interests are not overridden by your rights.
• Consent: If you choose to opt in for marketing communications or promotional offers, we will seek and rely on your explicit consent, which you can withdraw at any time.

How We Use Your Information

Your data may be used for the following purposes:

• To process, confirm, and deliver your flower orders.
• To communicate with you about your order status or any issues.
• To respond to your queries, requests, or feedback.
• To improve our goods and services by analysing trends and customer preferences (using aggregated or pseudonymised data where possible).
• To comply with legal or regulatory obligations, including accounting and tax requirements.
• To send marketing or special offer information where legally permitted and after obtaining consent.

How Data is Collected

Personal data is generally collected directly from you when you make an order, contact us for information, or provide feedback. In some cases, information may be collected via our website or phone order systems if used. Automatically collected data is limited to information necessary for the performance of an order, such as device information or IP address for technical troubleshooting, and is subject to our cookie or technology policies.

How Long We Retain Your Data

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order-related data is retained for up to seven years after the transaction to meet tax and accounting obligations. Data used solely for marketing purposes is kept until you withdraw consent.

Once the relevant retention period has ended, or upon your request where applicable, your data will be securely deleted or anonymised.

Processors and Data Sharing

Flowers Beddington uses trusted third-party service providers ("processors") to support our business operations. These may include:

• Payment processors to handle secure card transactions (we do not store card details ourselves).
• Delivery services for order fulfilment.
• IT providers and website hosts for infrastructure support.
• Professional advisers, including accountants and auditors, for our compliance and reporting needs.

All third-party providers are required to comply with the GDPR and to safeguard your data appropriately. Your data will not be sold, rented, or otherwise shared for commercial purposes outside these arrangements unless required by law.

Your Data Protection Rights

Under GDPR, you have the following rights with respect to your personal data:

• Right of Access: You can request copies of your personal data we hold about you.
• Right to Rectification: You may request that we correct or update any inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data, subject to legal or contractual restrictions.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
• Right to Object: You may object to our processing of your data based on legitimate interests or direct marketing.
• Right to Data Portability: You can request that we transfer your personal data to you or another service provider in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw at any time.

If you wish to exercise any of your rights or have concerns regarding your personal data, please contact us via the channels indicated on our website or on your order confirmation documents.

Security and Safeguards

We take the security of your data seriously and have implemented appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. Access to data is strictly limited to those who require it to process orders or provide customer service.

Updates to Our Privacy Policy

This policy may be amended over time to reflect changes in law, guidance, or business operations. Any significant changes will be communicated clearly, and the updated policy will be posted visibly to customers.

Contact and Further Information

If you have any questions or would like more information about how your data is handled by Flowers Beddington, please refer to our website or enquire at the point of order. We aim to address all privacy requests promptly in accordance with applicable laws.