Enfield Flowers GDPR Privacy Policy

Introduction

This Privacy Policy explains how Enfield Flowers collects, uses, stores, and safeguards your personal information in accordance with the General Data Protection Regulation (GDPR). This policy is applicable to all customers placing orders with Enfield Flowers in Enfield and the surrounding districts. We are committed to protecting your data and respecting your privacy at all times.

What Data We Collect

When you place an order with Enfield Flowers, we collect and process certain personal data that is necessary to fulfil your order, enhance your experience, and comply with legal obligations. The categories of personal data we may collect include:

• Name (customer and recipient)
• Contact details (including phone number and postal address)
• Delivery address
• Order information (products ordered, delivery instructions, card messages)
• Payment details (processed securely through our payment processors)
• Customer communications (including enquiries, complaints, and feedback)
• Website usage data (such as IP address, browser type, and cookies where applicable)

Lawful Basis for Processing

In accordance with Article 6 of the GDPR, we only process your data when there is a lawful basis to do so. The primary legal bases on which we process your personal information include:

• Contractual Necessity: Processing your data is required to fulfil the contract of selling and delivering flowers and related goods or services to you.
• Legal Obligations: We may need to process your information to comply with legal and regulatory requirements.
• Legitimate Interests: We may use your information for our legitimate business interests, such as improving our products and services, provided your rights and interests do not override these.
• Consent: For certain non-essential processing, such as optional marketing communications, we will ask for your explicit consent before processing your data.

How We Use Your Data

The personal data we collect may be used for the following purposes:

• To process and fulfil your flower orders, including delivery and customer care
• To communicate updates regarding your orders
• To respond to your enquiries or requests
• To improve our products and services based on feedback and usage analytics
• For internal record-keeping and to comply with legal and tax obligations
• To send marketing communications only if you have provided your consent

Data Retention

We retain your personal data only for as long as it is necessary to fulfil the purposes outlined in this policy and to comply with legal and regulatory requirements. Typically, customer order data is retained for up to 7 years to meet accounting and tax obligations. After this period, your personal data will be securely deleted or anonymised. Where you have given consent for marketing communications, your data will be retained until you withdraw your consent or request deletion.

Data Processors and Third Parties

To provide our services, we work with carefully chosen third-party service providers that process personal data on our behalf. These may include:

• Payment processors for secure handling of payment information
• IT service providers and website hosting companies
• Delivery and courier companies to complete your order
• Customer communication and order management platforms

All third-party processors must adhere to GDPR requirements and are contractually bound to keep your data confidential and secure.

International Data Transfers

We strive to store and process all personal data within the United Kingdom and European Economic Area (EEA). If, in rare circumstances, your data needs to be transferred outside of these regions, we will ensure that adequate safeguards are in place, such as Standard Contractual Clauses or equivalent protection measures.

How We Protect Your Data

Your privacy and the security of your data are of utmost importance to us. We employ a range of technical and organisational measures to safeguard your information against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted connections, secure payment gateways, restricted access controls, and regular data protection training for employees.

Your Data Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access the personal data we hold about you
• Right to request correction of inaccurate or incomplete data
• Right to request erasure of your data where there is no legal or contractual necessity to retain it
• Right to object to or restrict processing under certain circumstances
• Right to withdraw your consent to marketing communications at any time
• Right to request the transfer (portability) of your data to another provider
• Right to lodge a complaint with a supervisory authority if you believe your data protection rights have been breached

If you wish to exercise any of these rights, please contact us using the details provided on our website.

Policy Updates

Enfield Flowers may update this Privacy Policy from time to time in order to reflect changes to our practices, regulatory requirements, or for other operational reasons. We recommend reviewing this policy periodically to remain informed about how we manage your personal information.

Contact and Further Information

If you have questions, concerns, or requests related to your personal data or this Privacy Policy, please refer to the contact information available on our website. We are committed to ensuring that your privacy rights are respected and upheld at all times.