Privacy Policy for Brunswick Park Flowers Customers

Introduction

Your privacy is important to us at Brunswick Park Flowers. This Privacy Policy outlines how we collect, use, store, process, and protect your personal data when you place orders with Brunswick Park Flowers within Brunswick Park and its surrounding districts. This policy explains your rights under UK and EU data protection laws, including the General Data Protection Regulation (GDPR), and details our commitment to keeping your information secure and transparent.

What Data We Collect

When you place an order with Brunswick Park Flowers either directly or through our website, we may collect the following personal data:

• Identity Data: Your full name, title, and, where applicable, recipient's name.
• Contact Data: Delivery address, billing address, and telephone number.
• Order Data: Records of your purchases, chosen products, and order history.
• Payment Data: Type of payment used, limited payment card details (collected by our payment processor), and relevant transaction details. We do not store full card numbers.
• Communications Data: Any correspondence with us regarding your orders, feedback, or customer service queries.
• Technical Data: When you interact online, we may collect your IP address, device type, and browser information, as necessary for secure transactions and site functionality.

Lawful Basis for Data Processing

We process your personal information under several lawful bases as required by the GDPR:

• Contractual Necessity: To take steps at your request prior to entering into a contract and to fulfill your orders. For example, we need your delivery address to send your flowers.
• Legal Obligation: To comply with applicable laws and regulations, such as tax or accounting requirements.
• Legitimate Interests: To improve our services, ensure security, respond to your queries, and enhance your overall experience. We always consider your fundamental rights and interests before relying on this basis.
• Consent: When you specifically agree to receive marketing communications from us. You may withdraw this consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing and delivering your floral orders, including order confirmation, delivery updates, and customer support.
• Managing payments, fees, and charges, whilst preventing fraudulent transactions.
• Responding to your queries, requests, and feedback to provide quality customer service.
• Complying with our legal and regulatory responsibilities.
• Sending you marketing communications, only if you have provided explicit consent.
• Improving and securing our website and services, ensuring smooth and safe transactions.

Data Retention

We retain your personal data only as long as necessary for the purpose it was collected for, including for satisfying any legal, accounting, or reporting requirements. In general, we apply the following retention criteria:

• Order and Transaction Data: Retained for up to six years to comply with UK tax and financial regulations.
• Communications Data: Typically retained for up to two years after the conclusion of your enquiry or complaint.
• Marketing Preferences: Maintained until you withdraw your consent or unsubscribe.
• Website Logs: Kept for up to one year for security and troubleshooting purposes.

After these periods, your data will either be securely deleted or anonymised so it can no longer be associated with you.

Processors and Third Parties

We only share your data with trusted third parties who provide services on our behalf and under strict confidentiality agreements. These include:

• Payment platform providers to securely process card payments.
• IT and website hosting providers who ensure the functionality and security of our website and systems.
• Courier and delivery companies to fulfil your orders.
• Accountants and legal advisors to comply with our legal obligations.

We ensure that all data processors are compliant with GDPR requirements, and we do not sell or rent your personal information to any third parties for independent use. If your data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of your personal data held by us.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your data when it is no longer necessary, unless we are legally obliged to retain it.
• Right to Restriction: You may request restriction of processing while we resolve any issues surrounding accuracy or legality of processing.
• Right to Data Portability: You may request to receive your data in a commonly used, machine-readable format or have it transmitted to another organisation where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on your consent for processing, you may withdraw it at any time, without affecting the lawfulness of any processing before withdrawal.

To exercise any of these rights, please contact us using the details provided on our website or in your order confirmation. We will respond to your request as required by law, typically within one month.

Security of Your Personal Data

Brunswick Park Flowers employs appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include encrypted website connections, restricted staff access, routine data audits, and regular staff privacy training.

Policy Scope and Updates

This Privacy Policy applies to all customers placing orders with Brunswick Park Flowers from Brunswick Park and the surrounding districts. We may update this Privacy Policy from time to time to reflect changes in our practices or relevant laws. We encourage you to review this page periodically for any updates. Your continued use of our services will constitute your acceptance of those changes.

Contact and Further Information

If you have any questions or concerns about how we collect or use your personal data, or if you wish to exercise any of your data protection rights, please refer to our contact information provided on our website or your order documents. We are committed to working with you to resolve any complaints or clarify our privacy practices.