Privacy Policy for Flowers St James’s Customers

Our Commitment to Your Privacy

At Flowers St James’s, your privacy is of utmost importance. This Privacy Policy outlines how we collect, use, store, and safeguard your personal data. The policy applies to all customers placing orders with Flowers St James’s from St James’s and its surrounding districts.

The Information We Collect

To ensure efficient service and delivery, we collect the minimum necessary personal data. The types of information we process include:

• Identity Information: Name (first and last name) and, where relevant, your relationship to the order recipient.
• Contact Information: Address (delivery and/or billing), contact telephone number, and any additional instructions necessary for fulfilment of your order.
• Order Details: Product selections, preferences, delivery instructions, and message card content provided by you.
• Payment Details: Limited payment information, such as card details or payment confirmation, processed securely by our payment processor.
• Communication Records: Records of correspondence if you contact us directly about your order or service experience.

How We Use Your Data

Your personal data enables us to process, fulfil, and deliver orders, as well as handle customer service requests. Specifically, we use your data to:

• Process and deliver your flower orders to the specified recipient and address.
• Maintain our records for accounting and regulatory compliance.
• Communicate important information regarding your order (e.g., confirmation, delivery status).
• Respond to enquiries or resolve issues regarding your experience with Flowers St James’s.

Lawful Basis for Processing

Flowers St James’s processes your personal data only on legitimate grounds, in accordance with the General Data Protection Regulation (GDPR):

• Contractual Necessity: The majority of data is processed to carry out the contract of sale, enabling us to fulfil your flower order and related services.
• Legal Obligation: Certain data must be retained for financial, tax, and accounting purposes as required by law.
• Legitimate Interest: We may use data to improve our services or handle customer queries. Data processing under this ground is balanced against your privacy rights.
• Consent: If we ever decide to use your data for marketing or non-essential communications, we will seek your explicit consent, which you can withdraw at any time.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Typically:

• Order and delivery data are retained for up to six years to comply with tax and accounting requirements.
• Correspondence and complaint records are stored for up to three years from resolution.
• Should you request data erasure, your rights are respected unless legal obligations require otherwise.

Use of Processors and Data Sharing

To provide you with a seamless experience, we may share your data with trusted third-party service providers (‘processors’) strictly as required to complete your order and maintain operations. These may include:

• Delivery and courier partners to ensure accurate and timely deliveries.
• Payment service providers who securely process your payments.
• IT service providers who support our website and systems.

All processors act solely on our instructions, are selected for their data security measures, and are contractually bound to comply with GDPR requirements. Flowers St James’s does not sell, rent, or trade your personal data.

How Your Data Is Secured

We implement appropriate technical and organizational measures to safeguard your data from accidental loss, unauthorized access, disclosure, alteration, or destruction. This includes secure networks, restricted access, periodic data audits, and staff training on data privacy.

Your Rights Under GDPR

As a customer, you have specific rights regarding your personal data:

• The right to access – You can request a copy of the personal data we hold about you.
• The right to rectification – You are entitled to have inaccurate or incomplete data corrected.
• The right to erasure – Also known as ‘the right to be forgotten’, you can request deletion of your personal information where there is no overriding legal basis for retention.
• The right to restrict processing – You have the right to request restriction or suspension of processing in certain circumstances.
• The right to data portability – You can ask for your data to be provided in a structured, commonly used format for transfer to another service.
• The right to object – You may object to processing where we rely on legitimate interests or direct marketing.
• The right to withdraw consent – If processing is based on consent, you may withdraw it at any time.
• The right to complain – You can complain to a supervisory authority if you believe your rights have been infringed.

Application of This Policy

This Privacy Policy applies to all customers placing orders with Flowers St James’s from St James’s and the surrounding districts. We review and update this policy periodically. Significant changes are communicated clearly where appropriate.

Contact and Further Information

If you wish to exercise your rights, have questions about your personal data, or require more detail about our approach to privacy and data protection, please reach out to us via the usual Flowers St James’s customer contact methods. We are committed to protecting your data and upholding your privacy rights.