Canning Town Flowers Privacy Policy

Introduction

This Privacy Policy explains how Canning Town Flowers collects, uses, stores, shares, and protects your personal data when you place an order with us in Canning Town or surrounding districts. We are committed to maintaining your privacy and complying with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Please read this policy to understand your rights and our responsibilities regarding your personal information.

Scope of Application

This policy applies to all customers who place orders with Canning Town Flowers, whether directly in-store, by phone, or via our website, and who reside in or are sending orders within Canning Town and the surrounding areas. By using our services, you agree to the terms outlined in this policy.

What Data Do We Collect?

We collect the following types of personal data from our customers for the purposes of fulfilling orders and providing customer service:

• Identity Information: Full name, title.
• Contact Information: Address, delivery address, postcode, phone numbers, and, where relevant, email addresses.
• Order Details: Product choices, delivery instructions, messages for the recipient, and payment information (note: payment details are processed securely by approved third-party payment processors and not stored by us).
• Transaction History: Records of past orders, preferences, and communications with us.
• Technical Data: When using our website, we may collect IP address, device information, browser type, and cookies preferences for security and analytics purposes.

Lawful Basis for Processing Your Data

We process your personal data only where there is a lawful basis to do so, as laid out by the GDPR. The primary lawful bases we rely upon are:

• Contractual Necessity: Most of the data we collect is required in order to fulfill your order, process payments, deliver flowers, and provide customer support.
• Legal Obligation: We may be required to retain transaction and payment records for a certain period in compliance with UK tax and accounting laws.
• Legitimate Interests: We may use your data for legitimate business interests, such as improving our services, preventing fraud, or for internal analytics, provided your interests and rights do not override these uses.
• Consent: Where legally required, for example for email marketing (if applicable), we seek your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

The main purposes for which we use your data include:

• Processing and delivering your flower order.
• Providing customer support and responding to your enquiries.
• Internal record keeping and administering our business operations.
• Complying with legal and regulatory requirements.
• Improving our products and services.

Retention of Your Data

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting obligations. Typically, records of orders and related communications will be retained for up to six years to comply with tax and financial regulations. Anonymised data for statistical analysis may be kept beyond this period, but it cannot be linked to you as an individual.

Sharing and Data Processors

Your personal information is only shared with third parties where it is necessary for the administration of your order or as required by law. We do not sell or rent your information. The categories of third-party processors with whom we may share data are:

• Payment Processors: Securely handling your payment transactions. These third parties are compliant with relevant payment standards and do not retain, share, or use your information for purposes beyond processing payments.
• Delivery Partners: Couriers or delivery drivers may receive your name, address, and contact number to deliver your order efficiently.
• IT and System Providers: Website and IT support companies who provide necessary infrastructure, security, analytics, and data storage solutions. They only process data according to our instructions and subject to confidentiality obligations.

All third-party processors are thoroughly vetted and have agreements in place to ensure your data is processed safely and in accordance with GDPR requirements.

Your Rights Under GDPR

You have several important rights concerning your personal data under the GDPR. These include:

• Right of Access: You may request access to the personal data we hold about you and receive a copy.
• Right to Rectification: If your personal information is inaccurate or incomplete, you have the right to have it corrected.
• Right to Erasure: In certain circumstances, you may ask for your data to be erased.
• Right to Restrict Processing: You can request restrictions on how your data is processed in certain situations.
• Right to Data Portability: You may have the right to receive your personal data in a structured, commonly used format.
• Right to Object: You can object to processing in some circumstances, such as direct marketing (if we engage in this).
• Right to Withdraw Consent: Where you have given consent for a specific use of your data, you may withdraw it at any time.
• Right to Complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are unhappy with how your data is handled.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal requirements or changes in our business practices. The current version will always be available in our shop and on our website. We encourage you to review it regularly.

Contacting Us About Your Data

If you wish to exercise any of your rights, request more information, or have concerns over the handling of your personal information, please contact us directly by post or via our shop in Canning Town. We will respond to your request as promptly as possible and within the timelines required by law.

Thank you for trusting Canning Town Flowers with your information. Your privacy and data security are of utmost importance to us.