Greenwich Flowers Privacy Policy

About This Privacy Policy

This Privacy Policy explains how Greenwich Flowers ("we", "us", or "our") collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Greenwich Flowers from Greenwich and surrounding districts. It describes your rights concerning your personal data and how you may exercise them. We are committed to ensuring that your privacy is protected and that your personal data is used in a fair and transparent manner.

What Data We Collect

In order to fulfil your flower orders and provide excellent customer service, we collect and process certain personal data. The types of personal information we collect may include:

• Contact details: Your full name, delivery address, billing address, telephone number, and where applicable, recipient’s name and address.
• Order information: Details about your chosen flowers, delivery preferences, card messages, and special instructions.
• Payment details: Payment information is collected via secure payment processors but is not stored directly by Greenwich Flowers.
• Communication: Any correspondence between you and us, including email messages, order confirmations, delivery updates, and feedback.
• Technical data: Information automatically collected when you use our website, such as IP address, browser type, and device information, which helps us maintain the security and functionality of our services.

Lawful Basis for Processing Your Data

We process your personal data only where there is a lawful basis as defined under the GDPR. The lawful bases we rely on include:

• Contractual necessity: Processing your data is necessary for fulfilling your order, delivering products, managing payments, and handling customer queries.
• Legal obligation: We may need to process your data to comply with laws and regulations, such as taxation, accounting, and fraud prevention.
• Legitimate interests: We may use your information for legitimate business interests, such as improving our services and website, provided these interests are not overridden by your rights and interests.
• Consent: In some cases, we will rely on your consent, for example when sending you marketing communications that you have opted in to receive. You can withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing and delivering your flower orders to you or your chosen recipients.
• Communicating with you about your order, responding to your queries, and sending you updates about your delivery.
• Administering your payment and confirming transaction details.
• Improving our services based on customer feedback and technical analysis.
• Complying with applicable laws, regulations, and internal policies.
• Safeguarding our business from fraud, unauthorised access, or other illegal activities.
• With your consent, sending you offers or news about our products and services.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. The length of time depends on the type of data and our legal obligations. For example:

• Order and delivery records are typically retained for up to six years to comply with accounting and tax regulations.
• Correspondence and complaint records are kept for as long as needed to resolve queries and comply with legal requirements.
• Data processed under your consent will be retained until you withdraw that consent.

Once your data is no longer required, it will be securely deleted or anonymised.

Processors and Data Sharing

We may share your information with trusted third-party service providers (data processors) who assist us in delivering our services, such as:

• Payment processors for handling payments securely.
• IT and website hosting providers.
• Delivery services for transporting flowers to the correct address.
• Professional advisers, including accountants or legal advisors, where required for compliance.

These processors only access your data as necessary and are contractually bound to keep it confidential and secure. We do not sell or distribute your personal data to third parties for commercial purposes. Data may be disclosed where required by law or if necessary to protect legal rights.

Your Rights Under the GDPR

As a data subject within the scope of the GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete information.
• Right to erasure: You have the right to ask us to delete your personal data in certain circumstances.
• Right to restriction: You can request that we limit the processing of your data under certain conditions.
• Right to object: You may object to the processing of your data where we rely on legitimate interests or direct marketing.
• Right to data portability: Where applicable, you can request your data in a structured, commonly used format for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time.

If you wish to exercise any of your rights or have concerns about your data, please contact us through our standard communication channels. You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been mishandled.

How We Protect Your Data

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include secure servers, encrypted connections for online payments, and internal policies governing data handling. All staff and partners are trained on privacy and data protection requirements.

International Data Transfers

Greenwich Flowers primarily processes data within the United Kingdom and European Economic Area (EEA). Where it is necessary to transfer data outside the EEA, we ensure adequate safeguards are in place in accordance with GDPR requirements, such as Standard Contractual Clauses or approved certification mechanisms.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our services, legal obligations, or data processing practices. The updated version will be made available on our website. Please review this page regularly for any changes.

Contact Information

If you have any questions about this Privacy Policy, how we handle your personal data, or your rights under the GDPR, please get in touch with us through our published contact details on our website or by other standard communication channels.