Flowers Morden GDPR Privacy Policy

Introduction

At Flowers Morden, we are committed to protecting the personal data of every customer who places an order with us from Morden and the surrounding districts. This Privacy Policy explains what data we collect, how and why we process it, your rights in relation to your information, and how we fulfil our obligations under the General Data Protection Regulation (GDPR).

Scope of this Policy

This Privacy Policy applies to all customers placing orders with Flowers Morden, whether online, by phone, or in person, and covers services in Morden and adjacent areas. Please read this document carefully to understand how your personal data will be used and your rights regarding that data.

What Personal Data We Collect

We collect data necessary to process your orders and provide our services. The types of personal data we may collect include:

• Identity Data: such as your full name and, where applicable, business name.
• Contact Data: including delivery address, billing address, phone number, and any other contact information you provide.
• Order Details: records of transactions, order history, items purchased, recipient name, and delivery instructions.
• Payment Information: such as payment card details or other payment methods. Please note that payment information is processed securely and in compliance with applicable payment standards.
• Communication Data: details of your correspondence and interactions with us, including customer service queries and feedback.
• Technical Data: information collected automatically when you use our website, including browser type, IP address, device type, operating system, and cookie data.

Lawful Basis for Processing Personal Data

Flowers Morden processes your data lawfully, fairly, and transparently. The main lawful bases for processing your personal data under GDPR are:

• Performance of a Contract: We require personal data to process and deliver your orders and provide customer services.
• Legal Obligation: We may process data to comply with legal or regulatory requirements, such as tax laws or auditing.
• Legitimate Interests: We process data for legitimate business purposes, such as improving our products and services, fraud detection, and ensuring website security.
• Consent: For certain uses, such as sending marketing communications, we will only process your data if we have your explicit consent. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used only for the purposes for which it was collected, including:

• Processing, fulfilling, and delivering your orders
• Handling payments and refunds
• Providing customer support and responding to enquiries
• Maintaining records for accounting, auditing, and legal reasons
• Enhancing customer experience by analyzing purchase patterns
• Informing you of important service updates or, with your consent, sending marketing information of interest

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, and to comply with legal and regulatory obligations. Typically, personal data relating to orders and customers is retained for up to 7 years after your last transaction for accounting and tax purposes. After this period, your data is securely deleted or anonymized.

Data Processors and Third Parties

Flowers Morden may share certain data with trusted third-party service providers who act on our behalf as data processors. These may include payment processing providers, delivery companies, IT support, and cloud storage services. All processors are contractually required to adhere to the GDPR and maintain appropriate security measures.

We do not sell or rent your personal data to third parties for marketing purposes. Where required by law, we may disclose your personal data to government authorities or regulatory bodies.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, misuse, or disclosure. These include encryption, secure storage, and regular security assessments.

Your Data Protection Rights

Under the GDPR, you have a range of rights regarding your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to inaccurate or incomplete data.
• Right to Erasure: You can ask us to delete your personal data in some circumstances.
• Right to Restrict Processing: You can request a halt to certain processing while complaints are resolved.
• Right to Object: You can object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact us using the contact resources provided on our website or at our place of business. We will respond to your requests in accordance with GDPR timescales.

International Transfers

If your data needs to be transferred outside the UK or European Economic Area (EEA), we ensure it is subject to equivalent levels of protection by adopting appropriate safeguards, as required by GDPR.

Changes to This Privacy Policy

Flowers Morden reserves the right to update this Privacy Policy from time to time. Any significant changes will be communicated by posting an updated policy on our website. Please review this policy regularly to stay informed about how we protect your personal data.

Contact and Complaints

If you have any questions about this policy, your data, or wish to make a complaint, please contact us through the methods provided on our website or in person at our place of business. If you feel your concerns have not been addressed, you have the right to contact the relevant data protection authority.

Conclusion

Your privacy is important to Flowers Morden. We are dedicated to maintaining the trust and confidence of our customers in Morden and the surrounding districts and ensuring compliance with all aspects of data protection law.