Privacy Policy for Flowers Queensbury Customers

Introduction

This Privacy Policy governs the manner in which Flowers Queensbury (“we”, “our”, “us”) collects, uses, maintains, and discloses personal data of customers who place orders throughout Queensbury and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal information is treated transparently, securely, and in accordance with the UK General Data Protection Regulation (GDPR).

Scope of This Policy

This Privacy Policy applies to all personal data collected from customers who place orders, make enquiries, or otherwise interact with Flowers Queensbury within Queensbury and nearby areas. By using our services, you acknowledge that your personal data will be processed as described in this policy.

What Data We Collect

Flowers Queensbury collects only the minimum data necessary to process your order and provide high-quality service. The types of personal information we typically collect include:

• Contact Details: Name, delivery address, billing address.
• Order Details: Product(s) ordered, special instructions, preferred delivery date.
• Payment Information: Payment method details (payments are processed by trusted third-party providers; we do not retain full card data).
• Communication Data: Your correspondence with us, including order confirmations, enquiries, and feedback.

Additionally, when you visit our website, we may collect technical and usage data, such as your IP address, browser type, and device identifiers, to improve our online services.

Lawful Basis for Processing

Flowers Queensbury collects and processes your personal data only when there is a valid legal basis under the GDPR. The lawful bases we rely upon include:

• Contract: The processing is necessary to perform or enter into a contract with you, such as fulfilling your flower order.
• Legal Obligation: Processing is required to comply with our legal obligations, such as record-keeping and accounting.
• Legitimate Interests: We may process your data for our legitimate interests, such as customer service improvement and fraud prevention, in ways that do not override your rights.
• Consent: Where we rely on your consent, such as for optional marketing communications, you have the right to withdraw it at any time.

Why We Collect Your Data

We use your personal data solely for the following purposes:

• To process, confirm, and deliver your orders efficiently and accurately.
• To communicate with you about your orders, answer enquiries, and provide customer support.
• To manage payments and refunds via secure third-party payment providers.
• To comply with applicable laws, regulations, and accounting requirements.
• To improve our products, services, and overall customer experience.
• To send marketing communications only if you have provided explicit consent.

Data Processors and Sharing

Your personal data may be shared with trusted third-party service providers (processors) solely for purposes essential to fulfilling your order and conducting our business. Categories of processors may include:

• Payment processing companies
• Website hosting platforms
• Order management and delivery services
• IT support providers

All third parties are required to process your information in accordance with applicable data protection law and only on our instructions. We do not sell, trade, or otherwise disclose your personal information to unrelated third parties without your consent, unless required by law.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including fulfilling your orders and complying with our legal, accounting, or reporting obligations. Typically:

• Order details and associated personal data are retained for up to seven (7) years to comply with statutory financial and tax regulations.
• Marketing information is retained until you withdraw your consent or opt out of communications.
• Technical and usage data collected via the website may be retained for up to two (2) years for security and service improvement.

After the relevant retention period, your data will be securely deleted or anonymised.

Data Security

We have implemented appropriate technical and organizational measures to ensure your personal data is kept secure, confidential, and protected against unauthorized access, alteration, or disclosure. Access to your data is limited to authorized personnel and trusted processors who are contractually obliged to treat your data with care.

Your Data Protection Rights

Under the GDPR, you have several rights in relation to your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no lawful reason for its continued processing.
• Right to Restrict Processing: Ask us to suspend processing under certain circumstances.
• Right to Data Portability: Request transfer of your data to another service provider in a structured format.
• Right to Object: Object to processing of data based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent where consent has been used as the basis for processing.
• Right to Lodge a Complaint: Complain to a supervisory authority if you believe your rights have been violated.

To exercise these rights, please contact us using the details provided at the end of this policy.

Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be effective immediately upon posting on our website. Please review this page periodically to stay informed about how we protect and use your information.

Contact and Queries

If you have any questions about this Privacy Policy or how your personal data is handled by Flowers Queensbury, or if you wish to exercise any of your data protection rights, please contact us using our published contact details.

This policy is effective from 25th June 2024.