Flowers Swiss Cottage Privacy Policy

Privacy Notice for Flowers Swiss Cottage Customers

This Privacy Policy describes how Flowers Swiss Cottage (“we”, “us”, “our”) collects, uses, and protects your personal data when you place orders from Swiss Cottage and surrounding districts. We are dedicated to handling your personal information responsibly, respecting your privacy rights, and complying with the General Data Protection Regulation (GDPR).

Who This Privacy Policy Applies To

This policy applies to all individuals (“customers”, “you”) placing orders with Flowers Swiss Cottage, whether online, by phone, or in person. It covers services available in Swiss Cottage and nearby areas.

Personal Data We Collect

When you use our services, we collect certain personal data to process and fulfil your order. The categories of data we process may include:

• Contact Information: Such as your name, address, telephone number, and delivery address.
• Order Details: The items you order, preferences, delivery instructions, and messages to recipients.
• Payment Information: Limited financial information as relevant for payment processing (e.g., transaction amount, payment confirmation). We do not store your card details ourselves; these are handled securely by our payment processors.
• Communications: Emails, feedback, inquiries, and correspondence with customer support.
• Website Usage Data: When you visit our website, we may automatically collect information such as IP address, browser type, device used, and browsing activity via cookies and similar technologies.

Lawful Basis for Processing Your Data

We process your personal data on the following lawful bases as set out by the GDPR:

• Contractual Necessity: To process and manage your order, fulfil deliveries, and provide requested services.
• Legal Obligation: To comply with legal and regulatory requirements, such as record keeping for tax purposes.
• Legitimate Interests: For general business management, protecting our business and customers, improving our services, and responding to your queries.
• Consent: Where required, for example, if you opt in to receive marketing communications from us.

How We Use Your Personal Data

Your personal data is used by Flowers Swiss Cottage for purposes including:

• Processing and fulfilling orders, including delivering products to specified recipients
• Handling payments and refunds through our secure payment service providers
• Customer support and responding to queries
• Maintaining business records and meeting legal obligations
• Internal business analysis and service improvement
• Sending updates, where requested and permissible, about our products, services, or offers
>

Personal Data Retention

We retain your personal data only as long as is necessary for the purposes outlined in this Policy, including fulfilling your orders, complying with legal obligations, resolving disputes, and enforcing our agreements. Typically, order and transaction details are retained for up to seven years to comply with accounting and legal obligations. Communication data and records necessary for customer service may be held for a shorter period as required by business needs or regulatory requirements.

Processors and Data Sharing

To provide efficient services, we may share personal data with trusted third-party processors, such as:

• Payment service providers to process transactions securely
• IT service and website hosting providers for business continuity
• Couriers and delivery agents to deliver your orders

All such processors handle your data according to our instructions and in compliance with data protection laws. We do not sell or rent your personal data to third parties for marketing purposes. Personal data may be accessed or disclosed if required by law or to protect our legal rights or the safety of our staff and customers.

Your GDPR Rights

As a data subject, you have the following rights under GDPR regarding your personal data:

• Right of Access: To request details of the personal data we hold about you
• Right to Rectification: To ask us to correct any inaccurate or incomplete data
• Right to Erasure: To request deletion of your data where there is no lawful reason for us to continue to process it
• Right to Restrict Processing: To limit how we use your data in certain circumstances
• Right to Data Portability: To request transfer of your data to another service provider
• Right to Object: To object to our processing of your data based on legitimate interests or for direct marketing
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw consent at any time (this will not affect the lawfulness of processing before withdrawal)
• Right to Complain: You have the right to lodge a complaint with the data protection authority if you believe we have not handled your data in accordance with the law

Data Security

We implement appropriate technical and organisational measures to safeguard your personal data. These include secure networks, restricted data access, staff training, and ensuring our processors comply with GDPR requirements. Despite our efforts, no system can be guaranteed 100% secure. We encourage you to take precautions when sharing your data online.

International Data Transfers

All personal data is stored and processed within the European Economic Area (EEA) wherever feasible. If personal data needs to be transferred outside the EEA, we ensure adequate protections are in place as required by GDPR.

Changes to Our Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our practices or legal obligations. Any changes will be made available through our website or in-store notices. Our customers are encouraged to review the policy regularly to stay informed.

Contact and Further Information

If you have any questions about this Privacy Policy or your personal data, please get in touch with our team. We are committed to resolving your queries and ensuring your information is handled in line with GDPR requirements.