Flowers Wimbledon Privacy Policy

Our Commitment to Your Privacy

At Flowers Wimbledon, we are dedicated to protecting and managing your personal data responsibly under the UK General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, retain, and process your information. It applies to all customers placing flower orders with Flowers Wimbledon from Wimbledon and the surrounding districts.

What Personal Data We Collect

When you order from Flowers Wimbledon, we collect and process a range of personal information to provide our services effectively. The types of data we may collect include:

• Identity Data: Name, and occasionally information about the recipient when you send flowers as a gift.
• Contact Data: Billing and delivery addresses, phone numbers, and other relevant contact details necessary to fulfil your order.
• Order Details: Products ordered, delivery instructions, messages for recipients, and purchase history.
• Payment Information: Transaction details such as payment method, but not full credit or debit card numbers (payments are processed securely via third-party payment processors).
• Technical Data: IP address, browser type, and device information collected automatically when you use our online services.
• Marketing Preferences: Choices regarding receiving marketing communications from us.

Lawful Basis for Processing

We only process your personal data where we have a lawful reason to do so under GDPR. Our lawful bases include:

• Contractual necessity: To process and deliver your order, handle payments, and communicate with you regarding your purchase.
• Legal obligation: To comply with requirements set by law, such as maintaining business and tax records.
• Legitimate interests: To improve our services, understand customer preferences, and prevent fraud, provided that your interests and rights do not override our interests.
• Consent: For sending marketing communications and newsletters, only where you have explicitly opted in. You have the option to withdraw your consent at any time.

How We Use Your Information

We use the data we collect for the following purposes:

• Processing and fulfilling your flower orders and delivering them accurately.
• Managing your account and maintaining our relationship with you.
• Communicating order updates, delivery details, and responding to your inquiries.
• Sending marketing materials if you have given consent.
• Analysing and improving our website, products, and services based on technical and order data.
• Complying with applicable laws and regulatory requirements.

Data Retention Policies

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements:

• Order, delivery, and transaction records are typically retained for up to six years to meet tax and contractual obligations.
• Marketing consent records and preferences are retained until you withdraw consent or request deletion.
• Technical and analytical data is held for a shorter period to improve website security and user experience.
• When the retention period elapses, personal data is securely deleted or anonymised.

Third-Party Processors

Flowers Wimbledon works with carefully selected third-party service providers and processors that support the delivery of our services. These may include:

• Payment processors to manage secure financial transactions.
• Delivery and logistics partners to ensure timely and accurate deliveries.
• IT support and website hosting companies who may have limited and secure access to your data for maintenance and hosting purposes.
• Marketing solution providers, only with your explicit consent, to deliver emails or promotional materials.

All processors are contractually required to comply with GDPR, to use your personal data only for specified purposes, and to protect it with appropriate security measures. They are not permitted to use your information for their own purposes.

Your Rights Under GDPR

Under GDPR, you have a range of rights regarding your personal data. These include:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can request correction of any inaccurate or incomplete personal information.
• Erasure: You can ask us to delete your personal data where there is no good reason for us to continue processing it.
• Restriction: You can request us to suspend processing your personal data in certain circumstances.
• Portability: You can request transfer of your personal data to you or another party in a structured, commonly used format.
• Objection: You can object to the processing of your data based on our legitimate interests or for direct marketing purposes.
• Withdrawal of Consent: Where processing is based on consent (such as for marketing), you may withdraw your consent at any time.

To exercise any of your rights, please contact our customer service team using our website’s contact form or postal address. We may need to verify your identity before responding to your request.

Data Security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure. These measures include access controls, secure storage systems, staff training, and regular review of our data protection policies.

International Transfers

In very limited circumstances, your information may be processed outside the UK or EEA if necessary for service delivery. In these instances, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Policy Updates

We may make changes to this Privacy Policy from time to time to reflect legal or operational updates. The most recent version will always be available on our website. We encourage you to review this policy periodically.

Contact and Concerns

If you have any questions or concerns about how we handle your personal data, please refer to the contact information on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not complied with GDPR requirements.

This Privacy Policy is effective for all Flowers Wimbledon customers placing orders from Wimbledon and the surrounding districts.