Privacy Policy for Flowers Enfield Customers

Who This Privacy Policy Applies To

This Privacy Policy applies to all customers placing orders with Flowers Enfield from Enfield and the surrounding districts. It explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

What Data We Collect

To facilitate your order and provide the best possible service, Flowers Enfield may collect the following types of personal data:

• Contact Information: This includes your full name, delivery address, billing address, and contact number.
• Order Details: Products ordered, delivery instructions, card messages, and purchase history.
• Payment Information: Payment methods, transaction dates, and values (note: we do not store your debit or credit card details; these are processed securely via third-party payment processors).
• Communication Records: Correspondence via telephone, website forms, or written communication relating to your order or customer service queries.
• Website Usage Data: Information about how you interact with our website (such as IP address, device type and browser) to improve user experience and site security via anonymised analytics.

Lawful Basis for Processing Your Data

Flowers Enfield processes your personal data on one or more of the following lawful bases, as set out in the GDPR:

• Contractual Necessity: To fulfil your order and provide the services you request, such as processing payment and delivering flowers.
• Legitimate Interests: To improve our services, respond to customer enquiries, and ensure security and fraud prevention. In these cases, our interest will never override your fundamental rights and freedoms.
• Legal Obligations: To comply with applicable laws and regulations, such as accounting and tax purposes.
• Consent: If required, for activities such as direct marketing communications, which you can opt in or out of at any time.

How We Use Your Information

Your data is used for several purposes in relation to your order and our business operations, including but not limited to:

• Processing and delivering your flower orders accurately and efficiently.
• Providing customer care and support, resolving issues, and handling feedback.
• Maintaining accurate business and financial records as required by law.
• Improving our products, website, and customer experience through aggregated and anonymised data analysis.
• Sending relevant marketing or service communications, subject to your preferences and applicable laws.

Data Retention

Flowers Enfield retains your personal information for only as long as necessary to fulfil the purposes it was collected for. Specifically:

• Order and transactional data are typically retained for up to 7 years in accordance with tax and accounting requirements.
• Marketing data is held for as long as you consent to receiving communications, or until you opt out.
• Customer service correspondence is retained for up to 3 years to assist with any future enquiries or claims.
• Website usage data is stored only in anonymised or aggregated formats for analytic and security purposes.

We securely delete or anonymise your data once retention periods expire or upon your request where applicable.

Data Processors

In order to provide some of our services, Flowers Enfield works with selected third-party data processors. These may include:

• Payment Processors: Handle payments and refunds securely, never storing full card details on our systems.
• Delivery Partners: Manage logistics for delivering your orders to the correct address.
• IT Service Providers: Supply our website hosting, customer management systems, and security services.
• Marketing Platforms: Distribute permitted marketing communications where you have opted in.

All processors act strictly under our instruction and must comply with equivalent levels of data protection as required by GDPR. They are contractually obliged to keep your data secure and not to use it for their own purposes.

How We Protect Your Data

We take the protection of your data seriously and use appropriate technical and organisational measures, such as:

• SSL encryption for all transactions on our website.
• Restricted staff access to personal data on a need-to-know basis.
• Regular reviews and updates of our security policies and systems.
• Secure deletion and disposal of data at the end of its retention period.

Your Rights as a Data Subject

As a data subject under GDPR, you have the following rights in relation to your personal data:

• Access: Request details of the personal data we hold about you.
• Rectification: Ask us to correct any inaccurate or incomplete data.
• Erasure: Request deletion of your data when it is no longer needed, or when you withdraw your consent.
• Restriction: Limit processing of your data under certain circumstances.
• Data Portability: Receive your data in a structured, commonly-used, machine-readable format where applicable.
• Objection: Object to specific types of processing, such as direct marketing.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, or if you have any concerns about how we handle your data, please contact us using the current communication channels provided on our website or written correspondence address.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. The latest version will always be available on our website, along with the date of the most recent update. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contacting Flowers Enfield

If you have any questions, requests, or concerns relating to this policy or our data practices, please refer to the contact details currently available on our website or our business premises. We are committed to resolving your queries promptly and transparently.