Flowers Epping GDPR Privacy Policy

Name: LIKE A ROYAL
Brand: Flowers Epping
Price: 85.00 GBP
Availability: InStock

Privacy Policy Overview

At Flowers Epping, we are committed to safeguarding the privacy of our customers. This Privacy Policy outlines how we collect, use, retain, and protect your personal data when you place an order with us from Epping or the surrounding districts. We adhere strictly to the General Data Protection Regulation (GDPR) and ensure your data is treated lawfully and transparently. Please read this policy carefully to understand what information we collect, why, and your rights as a data subject.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Flowers Epping, whether through our website, over the phone, or in-person, provided you are situated in Epping or the surrounding districts. By engaging our services, you acknowledge that you have read and understood this policy.

Personal Data We Collect

Flowers Epping collects only the minimum amount of personal data necessary to process orders and provide our floristry services efficiently. The types of data we might collect include:

Identity Information: Your name, and, if you are placing an order on behalf of someone else, their name as recipient.
Contact Details: Your address, delivery address (if different), and, where provided, telephone number.
Order Information: Details of products you order, any special instructions, billing and delivery details, as well as preferred payment methods.
Transactional Data: Date and time of your order, payment status and value.
Communication Data: Any correspondence between you and Flowers Epping regarding your enquiry, order, or feedback.
Technical Data: Where ordering online, non-identifiable technical data such as IP address, browser type, and device information may be collected through essential cookies for security and functionality purposes only.

The Lawful Bases for Processing Your Data

Under the GDPR, we must have a lawful reason to collect and use your information. The principal lawful bases Flowers Epping relies upon include:

Contractual Necessity: To process and fulfil your order we must collect and use certain personal data. If you do not provide this information, we may not be able to complete your transaction.
Legal Obligation: We may need to retain certain data to comply with taxation or other statutory requirements.
Legitimate Interests: For operating and improving our service, keeping records, preventing fraud, and handling your queries.
Consent: On very rare occasions, where we collect information that is not strictly required for order fulfilment or our legal obligations, we will ask for your clear consent and explain the purpose at the time.

How We Use Your Information

Your personal information is used only for the following purposes:

To process, confirm, and deliver your flower orders.
To contact you with essential details about your order, such as confirmations or issues affecting delivery.
To comply with our legal and regulatory obligations.
To handle payments and refunds.
To respond to any queries, complaints, or feedback.
To improve and secure our services and systems.

How Long We Keep Your Data (Retention)

Your personal data is kept only as long as necessary to fulfil the purposes for which we collected it, including to meet any legal, accounting, or reporting requirements. Broadly, this means:

Order data: Retained for up to six years from the date of your order to comply with accounting and tax laws.
Correspondence and feedback: Retained for up to two years from the conclusion of communications, to address queries or potential disputes.
Data used for direct marketing: Held only as long as you agree to receive communications from us, and you can withdraw your consent at any time.

After these periods, your personal data will be securely deleted or anonymised.

Data Processors and Data Sharing

Flowers Epping does not sell your personal data. We only share your data as absolutely necessary to process your order or comply with statutory duties. Data may be shared with:

Payment service providers to process your payment securely.
Our delivery staff or trusted couriers, to ensure your order reaches its destination.
Accountants or legal professionals if required for compliance reasons.
IT and hosting service providers, who support our website and systems, under strict data processing agreements.

All third-party service providers are assessed for GDPR compliance and only process your data according to our instructions, using adequate security measures. Data will not be transferred outside the European Economic Area unless equivalent safeguards are in place.

How We Protect Your Data

Flowers Epping takes security seriously. We employ technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These include secure servers, encrypted payment processes, access controls, and staff training in data protection best practice.

Your Rights Under the GDPR

You have important rights in relation to your personal data under the GDPR. These include:

Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request correction of any incomplete or inaccurate data.
Right to Erasure: To request deletion of your data where there is no lawful reason for us to keep it.
Right to Restrict Processing: To request we limit how we use your data in certain circumstances.
Right to Object: To object to certain uses, such as direct marketing.
Right to Data Portability: To request that we provide your data to you or a third party in a commonly used format, where applicable.
Right to Withdraw Consent: Where we rely on your consent, you may withdraw this at any time.

To exercise any of these rights, please contact us via our website or written correspondence. We may need to verify your identity before responding to your request. If you are dissatisfied with our response or believe your data has been handled unlawfully, you also have the right to lodge a complaint with the relevant data protection authority.

Changes to This Policy

Flowers Epping may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. The revised policy will be published on our website with a new effective date. Please check back periodically for updates. Your continued use of our services after changes means you agree to the revised policy.

Contacting Flowers Epping About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy, your information, or your rights, please use the contact form on our website or write to us at our registered office. Our team will be happy to assist you promptly and transparently.