Bowes Park Flowers Privacy Policy
Introduction
This Privacy Policy explains how Bowes Park Flowers collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Bowes Park Flowers from Bowes Park and the surrounding districts. By using our services, you agree to the collection and use of information in accordance with this policy.
What Data We Collect
When you place an order or interact with Bowes Park Flowers, we may collect the following categories of personal data:
- Identity Data: Your first and last name.
- Contact Data: Address (for delivery and billing purposes), postcode, and, where provided, phone number.
- Order Data: Details of the products you have ordered, purchase history, delivery instructions, and special requests.
- Payment Information: Payment method details. Please note, we do not store credit or debit card numbers; these are securely processed by our payment providers.
- Communications: Any correspondence or preferences you express when contacting us, including feedback or complaints.
- Technical Data: Device information, IP address, and usage statistics, where applicable, to support a functional customer experience and to maintain service security.
Lawful Basis for Processing
Under GDPR, all processing of personal data must have a lawful basis. Bowes Park Flowers relies on the following grounds:
- Contractual Necessity: Processing your personal data is necessary for the performance of the contract when you place and fulfill an order with us.
- Legitimate Interests: For certain uses such as customer support, internal analysis, and improving our products and services.
- Legal Obligation: In some cases, we are required to process and retain data to comply with applicable legal requirements (for example, records for tax purposes).
- Consent: When required by law, for example if we seek your permission to send marketing communications. Where consent is relied upon, you may withdraw it at any time.
How We Use Your Data
We use your personal data to:
- Process and deliver your flower orders accurately and efficiently.
- Contact you to confirm delivery arrangements or to resolve any issues relating to your purchase.
- Respond to your inquiries, complaints, or feedback.
- Comply with our legal and regulatory obligations.
- Analyse our business performance and customer trends to improve future services.
We do not use your data to undertake automated decision-making or profiling.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Customer and order records: Maintained for up to seven years to comply with accounting and taxation obligations.
- Enquiries and correspondence: Usually retained for up to two years following your last interaction with us.
- Where data retention is no longer necessary, your personal information is securely deleted or anonymised.
Third-Party Processors
To provide our services, Bowes Park Flowers uses trusted third-party processors for specific purposes, such as:
- Payment Providers: To process your payment securely.
- IT Service Providers: To maintain our website and internal systems.
- Delivery Partners: Where necessary, to assist in fulfilling your order and ensuring your flowers reach their desired destination.
We require all third-party processors to respect the security of your personal data, to use it only for purposive reasons and to process it in accordance with the law. We do not sell or transfer your personal data for marketing purposes by third parties.
How We Protect Your Data
Bowes Park Flowers takes appropriate technical and organisational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include the use of secure servers, controlled access to data files, encrypted data transfer where necessary, and staff training in data protection.
Your Rights Under GDPR
As a resident of the United Kingdom (or European Union) and under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You may request details of the personal data we hold about you.
- Right to Rectification: You have the right to correct or update any inaccurate or incomplete data.
- Right to Erasure: Under certain conditions, you can request the deletion of your personal data.
- Right to Restrict Processing: In some cases, you can ask us to restrict how we use your data.
- Right to Data Portability: You can ask for your data to be transferred to you or to another provider, where technically feasible and lawful.
- Right to Object: You may object to the processing of your data where we are relying on legitimate interests.
- Right to Withdraw Consent: If we rely on your consent, you may withdraw it at any time.
We will respond to all requests relating to your rights as required by law and aim to resolve any concerns promptly and transparently.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The most current version will always be available on our website, with the date of the latest revision clearly indicated.
Contact and Concerns
If you have any privacy-related questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us using the details provided on our website. Furthermore, you have the right to lodge a complaint with the relevant data protection authority if you believe your data has been processed unlawfully.
Thank you for trusting Bowes Park Flowers with your personal information. We are committed to ensuring that your privacy is protected and respected at all times as you enjoy our floral services across Bowes Park and the surrounding districts.