Privacy Policy for Flowers Balham Customers

Introduction

This Privacy Policy explains how Flowers Balham collects, uses, stores, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Flowers Balham from Balham and the surrounding districts. Flowers Balham is dedicated to safeguarding your privacy and ensuring transparency about your data and rights.

What Data We Collect

When you interact with Flowers Balham—whether placing an order, making an enquiry, or using our services—we collect specific personal data. The types of information we gather may include:

• Contact details: Your name, delivery address, billing address, and contact numbers.
• Order information: Details of products ordered, delivery instructions, recipient name and delivery address.
• Payment data: Payment method and transaction details (note: actual card numbers/data are only processed by our secure payment provider and are not stored by us).
• Communication records: Any correspondence related to your queries, feedback, or order confirmations.
• Technical data: Your IP address, browser type, and usage patterns for the purpose of website security and improvement.

Lawful Basis for Processing Your Data

Under GDPR, our processing of your personal data is based on the following lawful grounds:

• Contractual necessity: Processing is required to fulfil your order—including delivery and payment processing.
• Legal obligation: To meet regulatory and legal responsibilities, including record-keeping for tax and accounting purposes.
• Legitimate interests: To respond to your enquiries, improve our service, prevent fraud, or communicate about your order status, where these interests are not overridden by your rights and interests.
• Consent: Where you opt-in to receive marketing communications or promotional offers, we will process your data on the basis of your explicit consent. You can withdraw your consent at any time.

Data Retention

Flowers Balham retains your personal data for only as long as necessary to fulfil the purposes for which it was collected. The standard retention periods are:

• Order and delivery records: kept for up to 7 years to comply with legal and taxation requirements.
• Communication data: retained for a period necessary to resolve queries, complaints, or disputes (typically not exceeding 2 years).
• Marketing preferences: retained until you withdraw consent or request deletion.
• Technical data: retained for a maximum period of 12 months for security and performance analytics.

Once the applicable period expires, your data is securely deleted or anonymised.

Processors and Data Sharing

To deliver our services, we sometimes need to work with trusted third-party processors. These processors may assist us in areas such as payment processing, order fulfilment, IT support, and website hosting. We only share the minimum required data with these service providers, who are contractually obliged to process it securely and in accordance with our instructions and GDPR requirements.

Your data is not sold to or shared with third parties for their own commercial purposes. Flowers Balham does not transfer your data outside the UK or EEA unless adequate safeguards are in place as required by GDPR.

Your Rights Under GDPR

As a customer placing orders with Flowers Balham from Balham or nearby districts, you have several important rights regarding your personal data:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: If your information is incorrect or incomplete, you have the right to request its correction.
• Right to Erasure: Under certain circumstances, you can ask us to delete your personal data (the 'right to be forgotten').
• Right to Restrict Processing: You may request limitations on how we use your information while a complaint is being investigated.
• Right to Data Portability: You have the right to request your personal data in a suitable electronic format for your own use or for transmission to another service provider.
• Right to Object: You may object to the processing of your data where it is processed on the basis of legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where consent has been given, you may withdraw it at any time, affecting only future processing.

To exercise any of your rights, or if you have questions about this policy, please contact us by using the communication options provided on our website or written correspondence to our registered address.

Security of Your Personal Data

Flowers Balham takes data security seriously and has implemented appropriate physical, technical, and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure. Access to your personal data is restricted to those personnel and processors who require it for providing our services.

Changes to This Privacy Policy

This Privacy Policy will be reviewed periodically and may be updated to reflect changes in the law or our business practices. We encourage customers to check this policy from time to time. Any substantial updates will be highlighted within the policy or via our service communications.

Applicability

This policy applies exclusively to customers placing orders with Flowers Balham from Balham and the surrounding districts and is intended to ensure compliance with all relevant data protection laws, notably the GDPR.

Contact and Further Information

If you have any queries or concerns about how Flowers Balham handles your personal data, your rights under GDPR, or wish to make a complaint, please contact us via the channels indicated on our website or through written correspondence. We endeavour to respond to all requests promptly and in accordance with relevant data protection legislation.