Flowers Bracknell Privacy Policy – Protecting Your Data

Introduction

This Privacy Policy explains how Flowers Bracknell collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Bracknell within Bracknell and the surrounding districts. We are committed to handling your data responsibly and transparently, ensuring your rights are respected at all times.

Data We Collect

When you place an order with Flowers Bracknell, we collect and process certain personal data necessary for fulfilling your order and providing our services. The types of data we may collect include:

• Contact details: Your name, recipient’s name, address, telephone number, and other relevant delivery information.
• Order details: Description of ordered items, messages for the recipient, delivery preferences, and order history.
• Payment information: Payment method, limited payment details (such as payment confirmation codes). Full card numbers or banking details are processed by our secure payment processors and are not stored by Flowers Bracknell.
• Communications: Records of correspondence if you contact us via our website contact forms or customer service.
• Technical information: IP address, browser type, and usage data when you use our website. This is collected via cookies and similar technologies to help improve the site’s performance and user experience.

Lawful Basis for Processing

Flowers Bracknell processes personal data under one or more lawful bases in accordance with the GDPR:

• Contractual necessity: Most of the data we collect is required to fulfil the contract of sale and provide you with our flower delivery service.
• Legal obligations: We may need to retain information for compliance with legal requirements, such as tax and accounting regulations.
• Legitimate interests: We may use your contact information for limited, relevant communications about your orders or feedback, provided these do not override your rights or interests.
• Consent: Where necessary, for example in marketing communications not directly relating to your order, we seek your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and delivering your orders efficiently and accurately
• Managing payment and verifying transactions
• Communicating with you about your order status or any customer service enquiries
• Managing and improving our website, including analysing usage patterns and troubleshooting
• Complying with legal obligations and resolving any disputes

Data Retention

Flowers Bracknell will only retain your personal information for as long as necessary to fulfill the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. Typically, personal data related to orders is retained for six years to comply with statutory and tax obligations. After this period, your data is securely erased or anonymised.

Data Processors and Third Parties

We may share your data with trusted third-party service providers who act as processors exclusively under our instructions. These may include:

• Payment processors, for handling payments securely
• Courier and delivery partners, for fulfilling delivery of orders
• IT infrastructure and website hosting providers, for website operation and data storage
• Professional advisors or legal authorities, if required by law

All third parties are carefully vetted and are required to comply with appropriate data protection and confidentiality standards. Flowers Bracknell does not sell or rent your personal data to any third parties for marketing purposes.

International Data Transfers

Your personal data is generally stored and processed within the United Kingdom or European Economic Area (EEA). If ever data must be transferred outside these jurisdictions, Flowers Bracknell ensures adequate safeguards are in place as required by GDPR, such as Standard Contractual Clauses or transfers to countries with adequate data protection laws.

Your Rights Under GDPR

You have several important rights regarding your personal data under GDPR, including the right to:

• Access – Request access to a copy of the personal data we hold about you.
• Rectification – Request correction of any inaccurate or incomplete data.
• Erasure – Request deletion of your personal data, subject to certain legal exceptions.
• Restriction – Request restriction of processing of your personal data in specific circumstances.
• Objection – Object to processing, including direct marketing where applicable.
• Portability – Request transfer of your data to another data controller, where technically feasible.
• Withdraw Consent – Withdraw your consent at any time for processing activities based on consent.

To exercise any of these rights, please contact Flowers Bracknell using the appropriate communication channels as described on our website. We will respond to your request in accordance with GDPR timeframes and procedures.

How We Protect Your Data

Flowers Bracknell uses a combination of technical and organisational security measures to protect your data, including encrypted data storage, secure transmission protocols, access controls, and regular security reviews. While we strive to use commercially acceptable means to protect your information, no method of transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant regulations. The most recent version will always be available on our website, and significant changes will be communicated to our customers where appropriate.

Contact and Complaints

If you have any questions or concerns regarding your personal data or this Privacy Policy, please refer to the contact information on our website. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office or your appropriate regulatory authority.