Beddington Flowers Privacy Policy

Introduction

This Privacy Policy describes how Beddington Flowers collects, uses, and protects the personal data of customers placing orders from Beddington and surrounding districts. As a business committed to your privacy and transparency, we comply with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws.

Scope of This Policy

This policy applies to all customers who place orders with Beddington Flowers, whether directly or through our website or other ordering methods. By placing an order with us, you acknowledge that you have read and understood the practices outlined in this policy.

What Personal Data We Collect

Personal data means any information relating to an identified or identifiable natural person. In connection with your order, Beddington Flowers may collect and process the following categories of personal data:

• Contact Information: such as your name, address (including billing and delivery), and phone number.
• Order Details: including order history, transaction amounts, delivery instructions, and card type (but not full payment card details).
• Email correspondence: information included in communications sent to us in relation to your order.
• Recipient Details: when providing delivery to someone other than yourself, we may collect the recipient’s name, address, and any delivery notes you provide.
• Technical Information: if you use our website, we may collect your IP address, browser type, operating system, and usage data through cookies for analytics and website performance.

Lawful Basis for Processing

We process your personal data strictly according to the lawful bases permitted under the GDPR. The principal bases for processing your data are:

• Contractual Necessity: Processing is necessary to fulfill our contract with you, such as processing your order, arranging delivery, and providing customer service.
• Legal Obligation: Processing is required to comply with accounting, tax, and other legal obligations.
• Legitimate Interests: We may process your data to enhance our services, improve our website, and communicate important service updates. In doing so, we carefully consider your rights and interests.
• Consent: Where you have expressly provided consent, such as for direct marketing, we rely on consent as our legal basis. You may withdraw your consent at any time.

How We Use Your Personal Data

Beddington Flowers uses personal data for the following purposes:

• To process your floral order and manage payment and delivery.
• To communicate with you in relation to your order or queries.
• To contact you about significant changes to our services or policies.
• To improve our products, services, and website functionality.
• For record-keeping, accounting, and to comply with applicable laws.
• With your consent, to send you information about our products, promotions, or seasonal offers. You may opt out of these communications at any time.

Data Retention

Your personal data will be retained for as long as is necessary to fulfil the purposes for which it was collected, such as providing services to you and maintaining records for legal or accounting requirements. Typically, order information is retained for up to seven years to comply with financial record-keeping obligations. Personal data used for marketing purposes will be retained until you withdraw your consent or opt out. After these periods, your data will be securely erased or anonymised.

Processors and Data Sharing

Beddington Flowers only shares your personal data with selected third-party service providers (processors) essential for processing and fulfilling your order. These may include:

• Payment processors to securely handle your payment transactions.
• Courier or delivery companies to ensure your flowers reach their destination.
• IT service providers who help us manage and maintain our systems and website.
• Accountants, and regulatory authorities (where required by law).

All processors are contractually obligated to safeguard your personal data, to act only on our instructions, and to comply with the GDPR. Your data is not sold or shared with third parties for their independent purposes.

International Transfers

At present, Beddington Flowers seeks to store and process your data within the United Kingdom or the European Economic Area (EEA). Should data ever be transferred outside the EEA, we will ensure appropriate safeguards are in place as required by the GDPR to protect your privacy rights.

Security of Your Data

We employ appropriate technical and organisational measures to secure your personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access, and against all other unlawful forms of processing. These measures are reviewed and updated according to changing technology and risk.

Your Rights as a Data Subject

As a customer of Beddington Flowers, you have the following rights under the GDPR:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Erasure: Also known as the 'right to be forgotten', you can request we erase your personal data in certain circumstances.
• Restriction: You may request that we restrict the processing of your data.
• Data Portability: You can request transmission of your data to another service provider where technically feasible.
• Objection: You have the right to object to the processing of your personal data in certain cases, including direct marketing.
• Withdrawal of Consent: Where our processing is based on your consent, you may withdraw your consent at any time.

To exercise these rights, please contact us via the contact options provided on our website or at our store. We will respond to your request in accordance with legal requirements and timelines.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the law or our business practices. Any updates will be made available through our website and clearly indicated. We encourage you to review this policy regularly.

Contact and Complaints

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us using the details available on our website or at our premises. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not complied with data protection law.

Beddington Flowers thanks you for your trust. We are committed to handling your personal information respectfully, securely, and transparently.