The Flower Store GDPR Privacy Policy

Introduction

This Privacy Policy outlines how The Flower Store collects, uses, stores, and protects the personal data of all customers placing orders with The Flower Store, including those residing in or ordering from The Flower Store and its surrounding districts. We are dedicated to complying with the General Data Protection Regulation (GDPR) and ensuring our customers’ privacy rights are upheld.

Personal Data We Collect

We collect and process various types of personal data in order to fulfill orders, provide customer service, and comply with legal obligations. The following types of personal data may be collected from you when you use our services:

• Identity Data: such as your name, surname, and, where applicable, information of gift recipients.
• Contact Data: including delivery address, billing address, and phone number or alternative contact details provided for order fulfillment.
• Order Data: details about your purchases, including ordered products, delivery preferences, and order history.
• Payment Data: transaction identification information. Please note we do not store your full payment card details; secure payment processors handle these directly.
• Communications Data: information you provide when you contact our customer service team, such as queries, feedback, and correspondence.

Lawful Basis for Processing

The Flower Store processes your personal data under the following lawful bases as outlined by the GDPR:

• Contractual necessity: We process your data to fulfill our contract with you, such as completing your order and arranging deliveries.
• Legal obligation: Certain data must be retained or processed to comply with accounting or tax laws and regulatory requirements.
• Legitimate interests: We may use personal data to improve our services, maintain security, and prevent fraud, without infringing on your fundamental rights.
• Consent: In certain cases, we may seek your consent to process your data, for example for marketing communications. You can withdraw consent at any time.

How We Use Your Data

The Flower Store uses your personal data for the following purposes:

• Processing and managing your orders, including confirmation, delivery, and customer support.
• Processing payments via secure, PCI-compliant payment processors.
• Communicating about your orders, including changes, updates, or feedback requests.
• Maintaining business records as required for warranty, accounting, and legal obligations.
• Enhancing the quality and security of our services.
• (Where you have opted in) Sending you information about our products, services, offers, or events.

Data Retention

Your personal data will be retained only as long as necessary to fulfill the purposes for which it was collected, fulfil legal obligations, resolve disputes, and enforce agreements. The retention period depends on the nature of the order and our legal requirements, including:

• Order and Transaction Data: ordinarily retained for up to 7 years to comply with statutory accounting obligations.
• Marketing Data: retained for as long as you remain subscribed to our communications or until you withdraw consent.
• Customer Service Records: retained for up to 2 years from your last interaction, unless legal or business needs require otherwise.

After these periods, data will be deleted or securely anonymized so it cannot be linked back to you.

Processors and Third Parties

To provide our services, we may share your personal data with trusted third-party processors, always subject to GDPR-compliant processing agreements and only for the stated lawful purposes. Third parties may include:

• Payment service providers for processing your transactions securely.
• Delivery couriers for ensuring safe and accurate delivery of your orders.
• IT and hosting providers for secure website and data storage management.
• Professional advisors (such as lawyers or accountants) where required by law.

We do not sell or rent your personal data to any third parties for commercial purposes. Data transfers outside the European Economic Area are protected by appropriate safeguards to ensure your data remains secure.

Your GDPR Rights

As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right to Access: Request access to a copy of your personal data held by us.
• Right to Rectification: Correct any inaccuracies or incomplete data.
• Right to Erasure: Request deletion of your data when it is no longer necessary for us to retain it, subject to legal obligations.
• Right to Restrict Processing: Request restriction or suppression of your data processing in certain circumstances.
• Right to Data Portability: Request a digital copy of your data in a structured, machine-readable format.
• Right to Object: Object to processing carried out on the grounds of our legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time.

If you wish to exercise any of these rights or make a complaint, our team will respond promptly in accordance with GDPR requirements. You also have the right to lodge a complaint with your national data protection authority.

Data Security

The Flower Store is committed to safeguarding your privacy and maintaining the security of your personal data. We implement appropriate technical and organizational security measures to protect data from unauthorized access, alteration, disclosure, or destruction. Such measures include secure encryption, access controls, regular security training for staff handling personal data, and strict vetting of third-party processors.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for any other reason. The latest version of the policy will always be made available to our customers. We advise you to review this document periodically to stay informed of how we protect your data.

Contacting Us

For any questions, concerns, or requests concerning your personal data and this Privacy Policy, please contact us using the channels provided on The Flower Store website or at our store premises. Our team will ensure your enquiry is handled in accordance with GDPR obligations.