Data Privacy Information for Crofton Park Flowers Customers

Crofton Park Flowers Privacy Policy

Overview

This Privacy Policy explains how Crofton Park Flowers ('we', 'us', or 'our') collects, processes, and protects personal data provided by customers placing orders for floral products and services within Crofton Park and its surrounding districts. We are committed to safeguarding your privacy and ensuring transparency in compliance with the General Data Protection Regulation (GDPR).

Scope of the Policy

This Privacy Policy applies to all individuals who place or who are recipients of orders through Crofton Park Flowers located in Crofton Park and the adjacent districts. By placing an order with us, you acknowledge and agree to the practices described in this policy.

Personal Data We Collect

When you interact with Crofton Park Flowers to place, modify, or enquire about an order, we may collect the following categories of personal data:

Contact details: Your name, the recipient’s name, address, telephone numbers, and occasionally additional contact information necessary for delivery.
Order information: Bouquet or arrangement details, messages, delivery instructions, and payment reference numbers.
Payment details: Limited transactional information (no card details are stored on our systems; payments are processed through secure third-party providers).
Communication records: Correspondence with us, including emails, notes from phone calls, and messages regarding your order.
Technical data: In limited cases, IP addresses and browser data on our website through essential cookies for operational purposes.

Lawful Basis for Processing

We process your personal data under the following lawful bases, as defined by GDPR:

Contractual necessity: Data is processed to perform the contract with you, such as fulfilling your order, processing payment, and arranging delivery.
Legal obligation: We may be required to retain invoices or transaction records for tax, accounting, or regulatory purposes.
Legitimate interests: For example, we may use order details for internal record-keeping or to respond to customer service enquiries, provided such processing does not override your rights and freedoms.
Consent: If we wish to send you marketing materials, we will seek your explicit consent, which can be withdrawn at any time.

Purposes of Data Use

Your personal data is used solely for the following purposes:

Processing and fulfilling floral orders, including delivery arrangements and order communications.
Managing customer and recipient details to ensure correct execution of requested services.
Facilitating secure payment transactions via authorised processors.
Responding to queries, complaints, or requests related to your order.
Complying with applicable legal or regulatory obligations.
With your consent, periodically sending information about new products or seasonal offers (where applicable).

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes outlined above:

Order-related and transactional data are retained for six years to meet tax, accounting, and regulatory requirements.
Contact and communication records are kept for up to two years for customer service purposes, unless a longer retention period is required or permitted by law.
Where consent has been provided for marketing, we will retain such information until you withdraw your consent or opt-out.

After the applicable retention periods, your data will be securely deleted or anonymised.

Data Processors and Data Sharing

We may share certain data with trusted third-party service providers (processors) solely to the extent necessary for them to perform specific tasks on our behalf:

Payment processors: Securely handle payment transactions.
Delivery partners: Assist in the fulfilment and delivery of floral orders.
IT and system support providers: Maintain and support our order management systems and basic website operations.

All third-party processors adhere to GDPR requirements and are contractually obliged to protect your data, use it solely for the agreed purposes, and not disclose it to unauthorised parties. We do not sell or lease your information to third parties for marketing purposes.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data held by Crofton Park Flowers:

Right of access: You may request access to your personal data and obtain information on how it is processed.
Right to rectification: You can request correction of incomplete or inaccurate information we hold about you.
Right to erasure: Under certain circumstances, you may request deletion of your personal data, known as the ‘right to be forgotten’.
Right to restrict processing: You can ask us to restrict certain processing of your data.
Right to data portability: If applicable, you may request a copy of your data in a commonly used, machine-readable format.
Right to object: You can object to particular types of processing, such as direct marketing.
Right to withdraw consent: Where you have given consent for processing, you can withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we have not complied with GDPR obligations.

Security of Personal Data

We are committed to ensuring that your personal information is kept secure. Appropriate technical and organisational measures are in place to safeguard your data against unauthorised access, misuse, or disclosure. Our security procedures are regularly reviewed and enhanced where necessary.

Changes to this Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in the law, our data processing practices, or for other operational reasons. Substantial changes will be notified on our website. Your continued use of our services following an update signifies your acceptance of the updated policy.

Contact and Further Information

If you have any questions about our privacy practices or wish to exercise your rights under this policy, please contact our data protection representative using the details available on our website or visit our Crofton Park location for assistance.