Privacy Policy for Flowers Aldershot Customers

Introduction

This Privacy Policy details how Flowers Aldershot collects, uses, protects, and processes personal data of customers placing orders from Aldershot and surrounding districts. We are committed to complying with the UK General Data Protection Regulation (GDPR) and ensuring your information is kept safe and private. Please read this policy carefully to understand how we handle your personal data and your associated rights.

Scope of the Policy

This Privacy Policy applies to all customers of Flowers Aldershot who place orders for flower arrangements and related services within Aldershot and nearby areas. It covers data collected through all channels such as our website, in-person orders, and telephone orders.

Personal Data We Collect

We collect a variety of information required to process your flower orders and provide you with a high-quality service. The information we may collect includes:

• Identity Data: Your name (and the name of the recipient if different).
• Contact Data: Address, delivery address, telephone number, and (optionally) email address.
• Order Information: Details of products or services you ordered, preferences, and order notes (including any personal message for cards).
• Payment Data: Payment confirmation details (we do not store card numbers, but your payment may be processed by our payment processors).
• Technical Data: If you visit our website, we may collect anonymized data such as IP address, browser type, device identifiers, and cookies related to your site usage.

Legal Basis for Processing Data

Flowers Aldershot processes your personal information only where we have a lawful reason to do so. Our use of your data relies on the following legal bases under GDPR:

• Contract Formation: To fulfil and manage your order, provide goods and services, and communicate with you as necessary for order completion.
• Legitimate Interests: For administrative purposes, business operations, and improving our services, provided these do not override your rights and interests.
• Legal Obligations: To comply with relevant laws and regulations, such as invoice and bookkeeping requirements.
• Consent: For certain optional marketing communications, if you have explicitly agreed to receive such messages.

How We Use Your Data

Flowers Aldershot uses your personal information to:

• Accept, confirm, and deliver your orders.
• Contact you regarding order details, delivery times, or issues.
• Maintain our records in compliance with legal and regulatory requirements.
• Respond to your queries, feedback, or complaints.
• Improve website experience and service offerings (using statistical and anonymized data).
• Send marketing communications only if you have provided consent.

Data Retention Periods

Personal data is retained only as long as necessary to fulfil the purposes outlined in this policy, unless an extended retention period is required or permitted by law. Generally, we retain:

• Order and billing information for up to 7 years for accounting and legal compliance purposes.
• Contact details used for marketing (with consent) until you withdraw your consent.
• Technical and anonymized data for analytics up to 12 months.

Once the relevant retention periods expire, your personal data will be securely deleted or anonymized.

Data Sharing and Processors

To fulfil your order and operate our business, Flowers Aldershot may share certain data with trusted third-party service providers (‘processors’), including:

• Delivery partners and couriers for the purpose of completing your order.
• Payment processors for handling transactions securely.
• IT providers who manage our website, software, or cloud storage solutions.
• Bookkeeping and accountancy services required for regulatory compliance.

All processors are contractually required to handle your data securely and only in accordance with our instructions and applicable GDPR requirements. We do not sell or share your data with any third parties for marketing purposes.

Your Rights Under GDPR

As a data subject, you have several rights regarding the personal data that Flowers Aldershot holds about you. These include:

• Right of Access: You may request details of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: In some circumstances, you may request we delete your personal data.
• Right to Restrict Processing: You can ask us to restrict how we process your data in certain cases.
• Right to Data Portability: You may ask us to transmit your data to another organisation in a structured format, where feasible.
• Right to Object: You may object to our processing where it is based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing), you may withdraw consent at any time.

To exercise these rights or make a complaint about our data practices, please contact us by post using the details on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you have unresolved concerns.

Data Security Measures

We take the protection of your data seriously and employ appropriate technical and organisational measures to prevent unauthorized access, disclosure, alteration, or destruction. These include secure physical storage, encryption, limited access protocols, and regular review of processes. Our staff are trained on data privacy obligations and only access your data when necessary for their role.

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom or the European Economic Area (EEA). If it is necessary to transfer data outside these regions, we ensure adequate safeguards are in place, such as contractual clauses or specific certifications, to protect your information as required by the GDPR.

Updates to This Policy

Flowers Aldershot reviews and updates this Privacy Policy regularly to remain compliant with data protection laws and best practice. We encourage you to review this policy periodically to stay informed of how we protect your information.

Contacting Flowers Aldershot

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us using the postal address or website contact form provided on our official website.