Privacy Policy for Flowers Bowes Park
Our Commitment to Privacy
At Flowers Bowes Park, safeguarding your privacy and personal information is a fundamental priority for us. This Privacy Policy describes how we collect, process, retain, and protect the personal data of all customers placing orders from Bowes Park and the surrounding districts. Our approach is fully compliant with the General Data Protection Regulation (GDPR), and we are committed to transparency about your rights and how we use your data.
Scope of this Policy
This Privacy Policy applies to all customers who place orders with Flowers Bowes Park in Bowes Park and adjacent areas. By ordering with us, you agree to the data practices outlined in this document. The policy covers personal data collected through our website, by phone, or in-person.
What Data We Collect
Flowers Bowes Park collects only data necessary for us to provide our services effectively. This includes:
- Identity Data: Name of the customer placing the order and, where applicable, the recipient.
- Contact Data: Delivery address, phone number, and any other contact details provided for communication or delivery purposes.
- Order Details: Information about products purchased, delivery instructions, messages to recipients, and preferences relevant to your order.
- Payment Information: Payment method and transaction details. We do not store full payment card numbers or security codes; these are processed securely by our payment processor.
- Communication Data: Records of your correspondence with us, including queries, feedback, and requests.
- Technical Data: IP address, device information, and usage data when you visit our website. This is collected through cookies and similar technologies to enhance your experience.
Lawful Basis for Processing
We process your personal data only when there is a lawful basis under GDPR:
- Performance of a Contract: Processing your orders, fulfilling deliveries, and communicating order status.
- Legitimate Interests: Improving our products and services, protecting our business and customers, and ensuring website security.
- Legal Obligation: Compliance with applicable laws, such as tax or record retention requirements.
- Consent: Where you have provided explicit consent for processing activities, such as marketing communications.
How We Use Your Data
Your personal information is used solely for legitimate business purposes, including:
- Processing and fulfilling your orders.
- Communicating with you about orders and queries.
- Delivering goods to you or your recipients.
- Improving our website and services based on usage data and feedback.
- Keeping accurate financial and legal records.
- Notifying you about updates to our services or policies, where relevant.
- Sending marketing communications where you have explicitly consented (with the option to withdraw your consent at any time).
Processors and Sharing of Data
We share your personal data only with trusted third-party processors necessary for the provision of our services. This includes:
- Payment processors who securely handle payment transactions.
- IT service providers supporting our website and systems.
- Delivery couriers responsible for fulfilling orders to your assigned address or recipient.
All partners and processors act in accordance with our instructions, adhere to data protection obligations, and do not use your data for their own purposes. We do not sell or rent your personal data to third parties.
How We Store and Protect Your Data
Your personal data is stored securely on servers and systems with appropriate technical and organizational measures in place to safeguard against unauthorized access, accidental loss, or misuse. Access is restricted to staff and processors who need the information for delivering our services.
Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected, including fulfilling orders, complying with legal requirements, and resolving disputes. Standard retention periods are:
- Order and Transaction Records: Kept for a minimum of six years to comply with accounting and tax obligations.
- Marketing Consent: Kept until you withdraw consent or request data deletion.
- Other Correspondence: Retained for up to two years or until no longer required for customer support.
Once the retention period expires, your data is securely deleted or anonymized.
Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal information:
- Right to Access: Request a copy of personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data under certain circumstances.
- Right to Restrict Processing: Ask us to limit the use of your data in specific cases.
- Right to Data Portability: Request transfer of your data to you or another service provider, where feasible.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: You can withdraw consent for data processing at any time where consent has been the basis for processing.
Changes to This Policy
We reserve the right to update this Privacy Policy periodically. Any changes will be effective upon posting the revised policy on this page. For significant changes, we may notify you through other appropriate means.
Contact and Concerns
If you have questions about this policy or wish to exercise any of your rights, please reach out to us through the communication channels provided on our website or in-store. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data protection rights have been violated.
Thank you for trusting Flowers Bowes Park with your information. We value your privacy and are committed to providing a transparent and secure experience.