Privacy Policy for Flowers Notting Hill Customers

Our Commitment to Your Privacy

At Flowers Notting Hill, we understand the importance of privacy and are committed to handling your personal data responsibly. This Privacy Policy explains how we collect, use, and protect your data when you place orders with us from Notting Hill and surrounding districts. Our policy ensures compliance with the UK General Data Protection Regulation (GDPR) and related laws.

Scope of This Privacy Policy

This policy applies to all customers ordering from Flowers Notting Hill in Notting Hill and the surrounding areas. By using our services or placing an order, you acknowledge the terms set out in this policy and give consent for processing your personal data as described. We recommend reviewing this policy regularly to stay informed about how we use and safeguard your information.

What Data We Collect

When you engage with Flowers Notting Hill, we collect the following types of personal data directly from you or automatically through our systems:

• Contact Information: Name, billing and delivery addresses, and occasionally company names for business orders.
• Order Details: Items purchased, order numbers, messages for bouquets, and delivery instructions.
• Payment Information: Payment method and transaction data (processed securely via our payment provider; we do not store your full card numbers).
• Communication Records: Notes of correspondence (such as queries, feedback, or complaints) to ensure customer service quality.
• Technical Data: IP addresses, device type, and browsing activity on our website, mainly through cookies for functional and analytical purposes.

Lawful Basis for Processing Personal Data

Flowers Notting Hill processes your data only where we have a lawful basis under the GDPR. Our primary legal grounds include:

• Contract Performance: Collecting and processing data necessary to manage, process, and deliver your order.
• Legitimate Interests: Using your information to maintain our records, respond to inquiries, and improve our services, so long as these interests are not overridden by your rights or interests.
• Legal Obligations: Retaining and disclosing information where required by law (for example, for accounting or tax requirements).
• Consent: For marketing communications or use of certain cookies, only with your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your data is used for specific purposes, including:

• Processing and delivering your floral orders.
• Communicating with you regarding your order or customer service queries.
• Improving and personalizing your online experience on our website.
• Fulfilling legal and contractual obligations.
• With your permission, providing updates, offers, or marketing information about our services.

How We Share Your Data & Data Processors

We ensure your data is handled securely and may only share it with trusted third parties ("data processors") when necessary for delivering our services. Our processors include:

• Payment Service Providers: For secure payment processing.
• Delivery Couriers: To ensure timely delivery of your order.
• IT & Website Support Providers: Who help maintain our website and systems.

Processors act on our explicit instructions, sign data processing agreements, and may not use your data for any other purposes. We do not sell, rent, or disclose your personal data for marketing by other third parties.

How Long We Retain Your Data

We retain your personal data only as long as necessary for the purposes outlined in this policy, taking into account our legal and contractual obligations. Usually:

• Order and customer service data are retained for up to seven years for legal, regulatory, and accounting reasons.
• Marketing data is retained only until you opt-out or withdraw consent.
• Cookies and website analytics data are retained according to the cookie’s lifespan, as detailed in our Cookie Notice.

How We Protect Your Information

We use appropriate technical and organizational measures to safeguard your data from unauthorized access, disclosure, alteration, or destruction. This includes secure data storage, limited access controls, and encryption where practical. All our staff and partners are subject to confidentiality obligations.

Your Data Protection Rights

Under the GDPR, you have certain rights regarding your personal data held by Flowers Notting Hill. These include:

• The right to access: You may request confirmation and a copy of your personal data we hold.
• The right to rectification: You can ask us to correct or update inaccurate or incomplete data.
• The right to erasure: In certain circumstances, you may ask us to delete your data.
• The right to restrict processing: You can request we stop certain processing of your data.
• The right to data portability: You may request a copy of your data in a structured format for transfer to another provider.
• The right to object: You may object to certain uses of your data, such as direct marketing.
• The right to withdraw consent: If consent is the basis for processing, you may withdraw it at any time.

To exercise these rights, please contact us using the details provided at the end of this policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in line with legal requirements or changes to our practices. The latest version will always be available on our website, with the date of revision indicated at the top. We advise reviewing it regularly.

Contact Us

If you have any questions or wish to exercise your data protection rights, please contact us via the methods provided on our website or ask in-store. We are committed to responding promptly to your request or concern.