Blackfriars Flowers Privacy Policy

Introduction

At Blackfriars Flowers, we are committed to protecting your privacy and handling your personal data in accordance with the law. This Privacy Policy describes how we collect, use, store, and manage your personal data when you place orders with us in Blackfriars and its surrounding districts. Our aim is to be transparent about our data handling practices, fulfill our legal obligations, and safeguard your rights.

Scope of this Privacy Policy

This policy applies to all customers who place orders with Blackfriars Flowers, whether in person, on the telephone, or through our online platforms, when services are delivered within Blackfriars and adjacent districts. By placing an order or interacting with us, you acknowledge the practices described in this policy.

What Personal Data We Collect

We collect the following types of data to fulfil your order and improve our services:

  • Contact Details: This includes your name, address, telephone number, and, where applicable, any delivery address you'd like us to use.
  • Order Information: Records of the products you've purchased, special instructions, messages for recipients, and delivery preferences.
  • Payment Information: Payment details processed securely by approved payment providers. Blackfriars Flowers does not directly retain full payment information such as card numbers, but payment confirmations and related transaction data are stored.
  • Communications: Records of correspondence if you contact us by phone, in writing, or via our digital channels.
  • Technical Information: When placing orders online, standard log information such as IP address, browser type, and device information may be collected to ensure order security and website functionality.

Lawful Basis for Data Processing

We process your personal data under the following lawful bases as outlined by the General Data Protection Regulation (GDPR):

  • Contractual Obligation: To process your order, deliver products, and provide requested services. Without this information, we cannot fulfil our obligations to you.
  • Legal Obligation: To comply with applicable laws and regulations, such as record-keeping and tax accounting.
  • Legitimate Interests: For purposes of improving our products, services, customer support, and ensuring the security of our systems.
  • Consent: We may rely on your consent to process certain types of data, such as for sending marketing communications, which you may opt-out from at any time.

How We Use Your Data

Your personal information is used primarily to:

  • Process and deliver your flower orders efficiently and correctly.
  • Communicate with you regarding your order or respond to your enquiries.
  • Meet legal and regulatory obligations.
  • Improve our products and services through analysis of anonymised usage data.
  • Send promotional materials or updates, if you have opted in to receive them. You are free to opt out at any time.

How Long We Retain Your Data

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including:

  • Providing services and fulfilling orders.
  • Complying with our contractual and legal obligations (such as tax requirements).
  • Handling customer service enquiries and possible disputes.

Ordinarily, customer data related to orders is retained for a period of up to seven years, unless there are overriding legal or regulatory requirements to hold it for longer. After this period, your data is securely deleted or anonymized.

Processors and Data Sharing

Blackfriars Flowers only shares your personal data with trusted third-party service providers as necessary for order fulfilment, payment processing, IT system maintenance, and legal compliance. These service providers act strictly on our instructions and are subject to contractual obligations under the GDPR to safeguard your information. Examples of such processors include payment gateway services, delivery partners, and IT support. Personal data will never be sold to third parties.

If we transfer data outside of the European Economic Area (EEA), we ensure that such transfers are protected by appropriate safeguards.

Your Data Protection Rights

You have the following rights regarding your personal data under GDPR:

  • Right to Access: You may request a copy of your personal data we hold about you and information on how it is processed.
  • Right to Rectification: If your personal information is inaccurate or incomplete, you can ask us to correct or update it.
  • Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request the deletion of your personal data.
  • Right to Restrict Processing: You have the right to restrict or object to certain types of data processing where applicable.
  • Right to Portability: You may request the transfer of your data to you or another service provider.
  • Right to Withdraw Consent: If processing relies on your consent, you have the right to withdraw consent at any time.
  • Right to Object: You may object to processing based on legitimate interests or direct marketing.

To exercise any of these rights or to raise a concern regarding your data, please contact us using the details provided on our website or at our premises. We will respond to your request in accordance with applicable law and within a reasonable timeframe.

Security of Your Information

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, misuse, or loss. Access to your data is limited to staff and trusted partners who require it to fulfil their duties in processing your order or maintaining our services. All data is stored securely, and regular reviews are conducted to assess and update our security measures.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in operational, legal, or regulatory requirements. The latest version will always be available on our website. We encourage you to review the policy regularly to stay informed of how we protect your information.

Contacting Blackfriars Flowers

If you have any questions regarding this Privacy Policy or our use of your personal information, you are welcome to contact us in person at our premises or via the contact details published on our website. We are committed to resolving any privacy concerns promptly and transparently.