Flowers Waterloo Privacy Policy: Your Data Matters to Us

Introduction

At Flowers Waterloo, we value your privacy and are fully dedicated to protecting your personal data. This Privacy Policy sets out how your information is collected, used, stored, and protected when you place an order with Flowers Waterloo. The policy applies to all customers ordering from Waterloo and surrounding districts, in compliance with the General Data Protection Regulation (GDPR).

Who We Are

Flowers Waterloo is a florist service catering to customers in Waterloo and neighbouring districts. When you place orders with us, you trust us with your personal information. This policy describes how we process your information and your rights with respect to it.

What Data We Collect

When you make a purchase or interact with our services, we collect and process the following data:

• Contact Information: Such as your name, postal address, delivery address, and telephone number.
• Order Information: Details regarding your order, including recipient details, messages to be included with your delivery, and purchase history.
• Payment Details: Limited payment details necessary to process your transaction, though most card payments are processed through secure third-party payment gateways and not stored by us.
• Communications: Records of correspondence, such as queries or feedback you send us, and any customer service interactions.
• Website Usage Data: Information about your use of our website, such as IP address, browser type, device information, and interaction with our online features. This may be collected via cookies or analytics tools.

Lawful Basis for Processing Your Data

Flowers Waterloo processes your personal data only where we have a lawful basis to do so, as outlined by the GDPR. The key bases for our data processing are:

• Contractual Necessity: We require certain personal information to fulfill your order and provide our services as requested.
• Legal Obligation: We may be required by law to process certain data, such as for tax or accounting purposes.
• Legitimate Interests: We may process your data as necessary for the operation of our business, such as improving our services, maintaining security, and preventing fraud. We ensure these activities do not override your fundamental rights and freedoms.
• Consent: Where processing is not strictly necessary for the above reasons, we will seek your consent, such as for optional marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling your orders, including delivery to recipients.
• Managing your customer account with us.
• Processing payments and issuing receipts or invoices.
• Communicating with you regarding your order status and responding to your queries or feedback.
• Improving the effectiveness and functionality of our website and services.
• Complying with legal and regulatory requirements.
• Sending marketing communications where you have opted in to receive them.

How Long We Keep Your Data

Flowers Waterloo retains personal data only as long as necessary for the purposes outlined above, in accordance with our data retention practices and applicable laws. Typically, we maintain customer and order information for a period necessary to fulfill orders, resolve disputes, respond to queries, and to comply with legal or accounting requirements. In most cases, this does not exceed seven years from your last interaction with our services. When data is no longer needed, it is securely deleted or anonymised.

Our Data Processors

To provide our services efficiently, Flowers Waterloo shares certain personal data with trusted third-party service providers acting as data processors. These may include:

• Payment Processors: Secure platforms that handle transaction processing.
• Delivery Partners: Couriers or delivery services responsible for transporting and delivering your orders.
• IT and Web Service Providers: Companies or platforms providing web hosting, analytics, security, and communication services.

All processors acting on our behalf are bound by GDPR-compliant data processing agreements and may only use your personal data as instructed by us, solely for the fulfillment of our services.

How We Protect Your Information

Flowers Waterloo protects your data using a combination of physical, technical, and organisational security measures. This includes encryption of payment data, restricted access to your information, and ongoing staff training regarding privacy and data protection. Should a data breach occur, we will promptly take the necessary steps, including notification procedures as required by law.

Your Rights Under GDPR

As a customer placing an order with Flowers Waterloo, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: If any information is incorrect or outdated, you can ask us to correct it.
• Right to Erasure: Subject to certain conditions, you may request that we delete your data.
• Right to Restrict Processing: You can ask us to pause processing your personal data in certain circumstances.
• Right to Data Portability: Where applicable, you are entitled to receive your data in a structured, commonly used format and have it transmitted to another controller.
• Right to Object: You have the right to object to the processing of your data in some situations, such as direct marketing.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw this at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of your rights, please contact us using the contact details provided on our website or in-store.

International Data Transfers

Flowers Waterloo generally stores personal data within the United Kingdom or the European Economic Area (EEA). If it becomes necessary to transfer your information outside these areas, we will ensure appropriate safeguards are in place to protect your rights and data security, in accordance with relevant data protection laws.

Updates to this Privacy Policy

This policy may be updated from time to time to reflect changes in legal requirements or our business processes. We recommend reviewing this Privacy Policy periodically to stay informed about how your data is protected.

Contact and Complaints

If you have any questions about this Privacy Policy or are dissatisfied with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner’s Office or your local data protection authority. For concerns or requests, please refer to the contact information on our website or speak to a member of staff in-store. Your privacy is important to us, and we are committed to addressing your queries promptly and transparently.