Privacy Policy for Customers of Flower Delivery Barbican

Introduction

This Privacy Policy sets out how Flower Delivery Barbican (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you place an order with us from Barbican or the surrounding districts. We are fully committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. This policy explains your rights and our obligations, ensuring transparency and accountability in all our data processing activities.

Scope of Policy

This Privacy Policy applies to all customers who place flower delivery orders with Flower Delivery Barbican, whether online, by phone, or in person, covering Barbican and adjacent districts. By placing an order or using our services, you acknowledge that you have read and understood this policy.

What Data We Collect

To fulfil your flower delivery orders and improve our services, Flower Delivery Barbican may collect the following types of information:

• Identity Data: Name, title, and where applicable, the recipient’s name.
• Contact Data: Billing address, delivery address, telephone numbers.
• Order Data: Details of products ordered, delivery instructions, order history.
• Payment Data: Payment method, transaction details (note: we do not store full payment card numbers but may receive confirmation from payment processors).
• Communication Data: Correspondence with us regarding orders, feedback, or enquiries.
• Technical Data: IP address, browser type, time zone settings, where you access our website online.

Lawful Bases for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Flower Delivery Barbican relies on the following legal grounds:

• Contractual Necessity: Most of your data is processed to enter into and fulfil contracts with you (e.g., processing and delivering your orders).
• Legal Obligation: We may retain some data to comply with legal requirements (e.g., tax, accounting).
• Legitimate Interests: We may use your data for legitimate business interests, such as improving our services or responding to your communications, provided these do not override your rights and interests.
• Consent: If we use your personal data for marketing purposes, we will request your explicit consent, which you can withdraw at any time.

How We Use Your Information

Your personal data is used solely for the purposes outlined below:

• Processing and fulfilling your flower orders.
• Delivering products to the specified recipient and address.
• Communicating with you about your order, including updates and customer support.
• Managing your payments and detecting or preventing fraudulent activities.
• Keeping records for accounting and legal purposes.
• Improving our services through customer feedback and usage patterns.
• Providing you with offers or information about our products, only where you have opted in.

Who Processes Your Data (Data Processors)

To deliver our services, Flower Delivery Barbican may share your personal data with trusted third-party processors, who provide the following functions, always under strict contractual confidentiality:

• Payment Processors: Third-party payment gateways who securely process your payments.
• Delivery Partners: Couriers or drivers who deliver your orders, receiving only information necessary for successful delivery.
• IT and Website Service Providers: Companies hosting or supporting our website and internal systems.
• Accountancy and Compliance Services: Professional services who assist with legal, accounting, tax, or auditing requirements.

We require all our processors to respect the security of your personal data and to process it only for the specified purposes. Your data will not be transferred outside the UK or European Economic Area unless sufficient data protection measures are in place.

Data Retention

Flower Delivery Barbican will only keep your personal data for as long as necessary to fulfil the purposes it was collected for, including satisfying legal, accounting, or reporting requirements. Typically, we retain order and transactional data for up to seven years, in line with accounting law. Contact and technical data not linked to orders is deleted or anonymised when no longer required. Where you have consented to marketing, we will store your contact details until you withdraw consent.

Your Data Protection Rights

As a customer, you have the following rights regarding your personal data under GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Ask us to restrict how your data is used.
• Right to Data Portability: Request data transfer to yourself or another provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time, where processing is based on consent.

We are committed to upholding your rights. To exercise any of these rights, or to make a complaint, please contact us via the methods provided on our website or retail outlet. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Children’s Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently processed such data, we will take steps to delete it promptly.

Security Measures

We take the security of your data seriously. Appropriate organisational and technical safeguards are in place to prevent misuse, loss, or unauthorised disclosure of your personal information. Access to your data is limited strictly to individuals and processors who require it to fulfil our services and obligations.

Updates and Changes to Our Policy

We may update this Privacy Policy from time to time to reflect changes in regulation, services, or data processing practices. Please check this policy periodically for the latest updates. Substantial changes will be communicated via our website or at the point of order.

Contact Us

If you have any questions, concerns, or wish to exercise your data rights in relation to this privacy policy, please contact us using the contact information available on our website or at our shop premises.