Privacy Policy for Flowers Camberley Customers

Introduction

This Privacy Policy outlines how Flowers Camberley collects, uses, stores, and protects the personal data of individuals placing orders for our products and services in Camberley and the surrounding districts. We are committed to protecting your privacy and ensuring compliance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Policy aims to provide clarity regarding the information we collect, the reasons for collecting it, how long it is retained, who processes it, and your data rights.

Scope of Policy

This Privacy Policy applies to all customers who place orders with Flowers Camberley, either via our website, by phone, or in person, within Camberley and neighbouring districts. It covers interactions related to purchasing flowers, accessing customer services, and engaging with our communications and marketing.

What Data We Collect

Flowers Camberley collects personal data you provide directly to us, as well as certain data automatically generated when you interact with our services. The categories of personal data we may collect include:

• Name: So we can identify you and your recipient.
• Contact Information: Such as address, telephone number, and delivery address, used for order fulfilment and communication.
• Email Address: To send order confirmations, updates, and customer service communications.
• Payment Information: Details needed to process your payment (note: card details are handled by secure third-party payment processors and are not stored by Flowers Camberley).
• Order Details: Including product selection, recipient name, messages, and special instructions.
• Website Usage Data: Such as IP address, browser type, pages visited, and cookies (see section on cookies below).

Lawful Basis for Processing Personal Data

Under the GDPR, we must have lawful grounds to process your personal data. The lawful bases Flowers Camberley relies on are:

• Contractual Necessity: Most of our data processing is necessary to perform a contract with you, such as fulfilling your flower order, arranging delivery, and processing payment.
• Legal Obligation: We may need to process your data to comply with applicable laws and regulations, including tax and accounting obligations.
• Legitimate Interests: Processing for our business interests, such as improving our services, communicating with you about orders, maintaining security, and handling queries or complaints, provided these interests are not overridden by your rights.
• Consent: In cases where consent is required (for example, for certain marketing communications), we will always ask for your explicit permission, which you may withdraw at any time.

How We Use Your Data

We use your personal data for a range of purposes, including:

• Processing and delivering flower orders, including communicating with you about your purchase.
• Managing payments and refunds securely and efficiently.
• Providing customer support and responding to enquiries.
• Sending service communications, order confirmations, and relevant updates regarding your orders.
• Subject to your consent, sending marketing communications about offers, new products, or services.
• Ensuring the security and integrity of our services and website.
• Complying with our legal and regulatory obligations.

Retention of Personal Data

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including fulfilling your orders, complying with any legal, accounting, or reporting obligations, and resolving disputes. Typically, order information is kept for up to seven years to meet record-keeping requirements. Information collected for marketing is retained until you opt out or withdraw consent. When your data is no longer needed, it will be securely deleted or anonymised.

Data Processors and Sharing

Flowers Camberley may engage third-party service providers (processors) to support our operations and services. These include:

• Payment processors handling secure financial transactions.
• Delivery services for order fulfilment.
• IT and website support providers.
• Marketing service providers (where consent is given).

All third-party processors are contractually required to process your data only in accordance with our instructions, to maintain its security, and to comply with the GDPR. We do not sell or rent your personal data to any third parties. Data sharing is strictly limited to what is necessary for fulfilling your order and supporting your customer experience.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. This includes restricting access to employee personnel on a need-to-know basis and applying encryption and secure data storage practices. Any payment information is handled securely by trusted payment processors who comply with applicable data security standards.

Cookies and Website Tracking

Our website may use cookies and similar tracking technologies to improve your browsing experience, understand how our website is used, and assist with site functionality. Cookies are small text files stored on your device. You will have the option to accept or reject non-essential cookies in accordance with current legislation. Essential cookies needed for order processing remain active for the core functioning of our services.

Your Data Protection Rights

As a customer, you have specific rights regarding your personal data under the GDPR:

• Right to Access: Request a copy of the personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request restriction of processing in specific scenarios.
• Right to Data Portability: Request a copy of your data in a machine-readable format for transfer.
• Right to Object: Object to our use of your data for direct marketing or certain business interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, or if you have any questions regarding your data privacy, please contact us. We will respond to all requests in accordance with legislative requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, consumer feedback, or legal obligations. The latest version will always be available on our website and will include its effective date. Please review it periodically to remain informed about how we protect your personal data.

Contact and Further Information

If you have any queries regarding this Privacy Policy, the data we hold about you, or wish to exercise your rights, we encourage you to reach out to us via the contact form or in-store at Flowers Camberley.

Please note, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled appropriately.