Privacy Policy for Bermondsey Flowers Customers

Introduction

Bermondsey Flowers is committed to protecting your privacy and complies with UK and EU data protection regulations, including the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and share personal data of our customers who place orders from Bermondsey and the surrounding districts. It also outlines your rights as a data subject. This policy applies whenever you use our floral products and services, whether in person, online, or via phone orders.

What Personal Data We Collect

When you order from Bermondsey Flowers, we may collect the following categories of personal data:

• Identity Data: Your name, recipient name (if sending flowers to another person), and any titles used.
• Contact Data: Delivery address, billing address, and other location information necessary to fulfil your order.
• Order and Transaction Data: Details about your orders, including product selections, purchase history, transaction amounts, and payment status (excluding full payment card details; these are processed securely by payment processors).
• Communication Data: Records of your communications or feedback submitted to us by phone, in store, or online.
• Usage Data: Information about how you use our website and services, collected via cookies or other online tracking tools, when applicable.

Lawful Basis for Processing

We process your personal data only when we have a lawful basis as set out in Article 6 of the GDPR:

• Contractual Necessity: To process and deliver your order, manage payments, and provide customer support as necessary for fulfilling our contract with you.
• Legal Obligations: To comply with legal or regulatory requirements, such as tax and accounting obligations.
• Legitimate Interests: To improve our services, prevent fraud, and manage business operations, provided such interests are not overridden by your rights and interests.
• Consent: Where you have opted in to receive marketing or promotional communications, we will rely on your consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Fulfilling and delivering your flower orders, including communicating with you and processing payments.
• Providing customer support and handling inquiries or complaints.
• Maintaining records for accounting, tax, and compliance purposes.
• Improving our products, services, and customer experience.
• Sending marketing information, but only if you have given explicit consent.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order details and related customer data are retained for up to seven years to comply with legal and financial record-keeping obligations. After this period, data will be securely deleted or anonymised, unless further retention is justified by a legitimate business purpose or legal requirement.

Data Processors and Third Parties

Bermondsey Flowers may use selected third-party service providers (processors) to support our business operations. These may include:

• Payment Processors: To securely process payments on our behalf.
• IT Service Providers: To maintain and host our website or support our customer databases and email services.
• Delivery Partners: To assist in delivering your floral orders.
• Professional Advisors: Such as accountants and legal consultants, where necessary for business compliance and support.

All such processors are vetted and required to act only under our instructions, comply with data protection law, and take appropriate security measures to protect your data. We do not sell or rent your personal information to third parties. Data may be disclosed to law enforcement or regulatory bodies only where required by law.

International Data Transfers

We will not transfer your personal data outside of the UK or European Economic Area (EEA) unless appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Security

Bermondsey Flowers takes appropriate security measures to protect your personal data from loss, misuse, unauthorised access, and disclosure. This includes secure storage of information, access controls, and staff training in data protection.

Your Rights as a Data Subject

Under the GDPR, you have rights concerning your personal data. These include:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections or updates to incomplete or inaccurate data.
• Right to Erasure: You may request the deletion of your personal data where there is no valid reason for continued processing.
• Right to Restrict Processing: In certain cases, you can request us to limit how we use your information.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format and transfer it to another provider when technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.
• Right to Complain: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been breached.

Applicability of This Policy

This Privacy Policy applies to all individuals placing orders with Bermondsey Flowers from Bermondsey and the surrounding districts. By using our services or placing orders with us, you acknowledge the terms described in this policy.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in legal requirements or our business practices. Any updates will take effect once posted on our website or made available in-store. You are encouraged to review this policy regularly to remain informed about how we protect your information.