Flowers Ickenham Privacy Policy

Name: SPARKLING EYES
Brand: Flowers Ickenham
Price: 50.00 GBP
Availability: InStock

Introduction

This Privacy Policy describes how Flowers Ickenham collects, uses, processes, and protects the personal information of customers placing orders from Ickenham and its surrounding districts. We are committed to ensuring that your privacy is protected and that all personal data collected is handled in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

Scope of Policy

This policy applies to all customers who place orders with Flowers Ickenham, whether through our website, over the phone, or in-person, when the orders are fulfilled within Ickenham or its neighbouring areas.

What Personal Data We Collect

We collect and process different types of personal data depending on your interactions with us. The following categories of information may be collected:

Identification Data: Name (customer and recipient), and contact details (address, telephone number as provided at order time).
Order Information: Delivery address, product selection, card messages, preferences, and instructions relating to your purchase.
Payment Information: Limited payment details (e.g., the payment method, transaction reference), though full payment data such as card details are handled only by our payment processors and are not stored by Flowers Ickenham.
Communication Data: Any correspondence you send to us regarding your order, feedback, or queries.
Technical Data: Information about your interaction with our website, such as IP address, browser type, and cookies as relevant to website usage (if you order online).

Lawful Basis for Processing

Under GDPR, we must have a lawful reason to process your personal data. The primary lawful bases we rely on are:

Contractual Necessity: We process your data to fulfil our contract with you, specifically to process and deliver flower orders as requested.
Legitimate Interests: We may use your data to improve our services, respond to enquiries, or retain details for customer service, unless your rights override our interests.
Legal Obligation: We may process certain information to comply with legal or regulatory requirements, such as tax or financial recordkeeping.
Consent: Where none of the above apply (such as for optional marketing communications), we will request your explicit consent, which you may withdraw at any time.

How We Use Your Data

We use your personal data for the following purposes:

To receive, process, and deliver your flower orders, including contacting you or the recipient about delivery.
To process payments and prevent fraudulent transactions.
To respond to enquiries, complaints, or requests for support.
To comply with legal, regulatory, or tax obligations.
To improve our products and services, and for routine business operations.
To send you service-related notifications and, if you have given consent, marketing updates about our products or promotions.

Sharing Your Data: Processors and Third Parties

We may share your data with certain third parties, acting as data processors, only to the extent necessary to fulfil your order or to support Flowers Ickenham’s operations. These may include:

Payment processing providers (handling your card or transaction securely).
IT service providers (maintaining our ordering or website systems).
Delivery service partners (for order delivery within Ickenham and nearby districts).
Professional advisers (such as accountants or legal advisors, for compliance purposes).

All third-party processors are contractually required to comply with confidentiality and data protection obligations as required by GDPR.

Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected:

Order Processing: Your data is retained for up to six years after an order to comply with legal recordkeeping requirements and to facilitate customer service or repeat orders.
Marketing Data: If you have consented to marketing, your contact data will be retained until you withdraw consent or unsubscribe.
Technical Data: Website logs or analytics data may be retained for up to two years for operational and security purposes.

At the end of these periods, your data will be securely deleted or anonymised.

Your Rights Under GDPR

You have a range of rights in relation to your personal data, including:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete data.
Right to Erasure: You may request deletion of your data where applicable by law.
Right to Restrict Processing: In certain circumstances, you can restrict or object to our processing of your data.
Right to Data Portability: Request to receive your data in a portable format.
Right to Withdraw Consent: Where we rely on consent, you may withdraw this at any time.

If you wish to exercise these rights, please contact us using our published contact methods on the website or in writing. We may require proof of your identity before responding to such requests.

Data Security

We protect your personal data using appropriate organisational and technical measures to prevent unauthorised access, disclosure, alteration, or loss. Access is only provided to those who need it to fulfil their duties.

Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such information, please contact us for deletion.

Policy Updates

This Privacy Policy may be updated from time to time to reflect legal or operational changes. We will notify significant changes on our website. Your continued use of our services constitutes acceptance of such updates.

Contacting Us

If you have any questions, concerns, or requests about this Privacy Policy or the way we handle your data, please contact us using the details published on our website or through your preferred method of correspondence.