Chadwell Heath Flowers Privacy Policy

Privacy Policy Overview

This Privacy Policy outlines how Chadwell Heath Flowers collects, uses, protects, stores, and shares personal data belonging to customers who place orders from Chadwell Heath and the surrounding districts. We are committed to respecting your privacy and complying with the European Union’s General Data Protection Regulation (GDPR), ensuring that your information is handled securely, transparently, and lawfully.

Scope and Applicability

This policy applies to all individuals who place orders with Chadwell Heath Flowers, whether via our website, telephone, or in person, within Chadwell Heath and its neighbouring areas. By placing an order, you acknowledge and accept the practices described in this privacy policy.

What Data We Collect

Chadwell Heath Flowers may collect and process the following categories of personal data:

• Identification Data: Name, title, and (when ordering on behalf of someone else) the recipient’s name.
• Contact Details: Address, delivery address, telephone number, and where required, contact information for recipients.
• Order Information: Details of products purchased, order notes, delivery preferences, and messages for gift cards.
• Payment Data: Method of payment, partial card information (last four digits), or transaction references. Note: we do not store full payment card numbers or CVV codes.
• Account Data (if applicable): Account registration details including email address and password (encrypted), if you create an account with us.
• Communication Data: Records of correspondence such as emails, web forms, or notes taken from phone orders.
• Technical Data: IP address, device type, browser type, and cookies used to facilitate website usage and security.

Lawful Basis for Processing

We only process your personal data in accordance with at least one lawful basis as set out in Article 6 of the GDPR. The key lawful bases governing our data processing activities include:

• Contractual Necessity: To fulfil orders and provide services you have requested, including processing payments, arranging deliveries, and managing customer support.
• Legitimate Interests: To improve customer experience, prevent fraud, manage inventory, and market our products to existing customers (unless you opt out).
• Legal Obligation: To comply with applicable laws, regulations, and accounting record-keeping requirements.
• Consent: Where required for certain types of direct marketing or optional newsletter subscriptions, based on your explicit consent.

Retention of Your Data

Chadwell Heath Flowers will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typical retention periods include:

• Order and Delivery Information: Kept for up to seven years to comply with accounting and tax regulations.
• Account Holder Data: Retained while your account remains active or until you request deletion.
• Marketing Preferences: Retained for as long as your consent remains valid or until you opt out.
• Correspondence: Retained up to two years unless related to an ongoing dispute or complaint.

After the relevant retention period, your data will be securely deleted or anonymised.

Processors and Data Sharing

To deliver and improve our services, we sometimes share your information with trusted third-party service providers (“processors”), for the following purposes:

• Payment Processors: To securely process your transactions in compliance with financial regulations.
• Delivery Partners: To send orders to delivery couriers or local delivery drivers.
• Technology Providers: For secure website hosting, customer relationship management, and email communications.
• Professional Advisors: Where required for legal, accounting, or insurance purposes.

All processors engaged by Chadwell Heath Flowers are contractually bound by data processing agreements to adhere to GDPR requirements, ensuring your data is managed securely and only for the intended purposes.

We do not sell, rent, or trade your personal information to any third parties. Your data will only be accessed or disclosed when necessary to fulfil your order or comply with legal obligations.

Your Rights Under GDPR

In accordance with the General Data Protection Regulation, you have a variety of rights relating to your personal data:

• Right of Access: You can request a copy of personal data we hold about you at any time.
• Right to Rectification: If your data is incorrect or incomplete, you may request it is corrected or updated.
• Right to Erasure: Also known as the ‘right to be forgotten’—you can ask us to delete your personal data, subject to retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data under certain circumstances.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format to transfer to another provider where technically feasible.
• Right to Object: You have the right to object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided on our website or through our standard enquiry channels. We will respond to all requests within the timeframes specified by relevant data protection laws.

Data Security and International Transfers

We implement a variety of technical and organisational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure. These include secure servers, encryption where appropriate, and limited staff access. We do not transfer personal data outside the United Kingdom or European Economic Area unless adequate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Changes to this Privacy Policy

From time to time, we may update this Privacy Policy to reflect changes in our practices, regulatory requirements, or improvements to our service. You will always find the most current version of our privacy policy on our website, and significant changes will be clearly highlighted on our order pages or communicated directly where required.

Contact and Complaints

If you have any questions regarding this Privacy Policy or how we process your personal data, please contact us using the methods described on our website. If you remain dissatisfied with how we process your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Your trust is vital to us, and Chadwell Heath Flowers will continue to maintain the highest standards of data protection for all our customers in Chadwell Heath and surrounding districts.