Stockwell Flowers GDPR Privacy Policy

Introduction

This Privacy Policy applies to all customers placing orders with Stockwell Flowers from Stockwell and the surrounding districts. We are dedicated to safeguarding your privacy and handling your personal data in a transparent manner. This policy details what data we collect, on what lawful grounds, how long we retain it, the processors we work with, and the rights you have under the UK General Data Protection Regulation (GDPR).

What Data We Collect

Stockwell Flowers only collects the data necessary to process and fulfil your orders, ensure high-quality service, and comply with our legal obligations. The categories of personal data we collect include:

• Identity Data: Name, title.
• Contact Data: Delivery address, billing address, phone number (if provided), and, where applicable, other contact details required for order fulfilment.
• Transaction Data: Details about products you have ordered, payment confirmation (we do not store payment card details, but may retain transaction references), and delivery instructions.
• Correspondence: Any communications or feedback sent to us in relation to your order.
• Marketing Preferences: Your stated preferences if you opt-in to receive marketing or promotional materials from us.

Lawful Basis for Data Processing

Stockwell Flowers relies on several lawful bases for processing your personal data, as set out by the GDPR:

• Contractual Necessity: We process your data as required to fulfil orders and provide our flower delivery services to you.
• Legal Obligation: We may process your data to comply with accounting, tax, or anti-fraud regulations.
• Legitimate Interests: Where necessary, we process your data to improve our services, respond to your queries, and ensure the security of our business and customers, provided that these interests are not overridden by your rights.
• Consent: Where you have given explicit consent (such as for marketing communications), we process your personal data accordingly. You have the right to withdraw consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and delivering your flower orders, including arranging delivery and payment confirmation.
• Managing customer service queries and handling feedback.
• Meeting our legal and regulatory obligations.
• Sending marketing material only if you have opted in.
• Improving our products and customer service by analysing non-identifiable data and feedback.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, including any legal, accounting, or reporting requirements. Generally:

• Order and transaction data are typically retained for six years following the fulfilment of your order, to comply with legal obligations and for the establishment or defence of legal claims.
• Contact and correspondence data are retained for three years after your last interaction, unless you request erasure or object to specific uses (such as marketing).
• Marketing consent records are retained until you withdraw your consent or opt out.

When data is no longer needed, it will be securely erased or anonymised.

Data Processors and Sharing

Stockwell Flowers may, where necessary, share your personal data with trusted third-party service providers (data processors) to enable us to deliver our services. These may include:

• Payment processing providers who handle payments for orders.
• IT service providers who manage systems and software required to fulfil orders.
• Courier or delivery services responsible for transporting flowers to your specified address.
• Accounting or regulatory authorities for compliance purposes.

All our processors are bound by contractual agreements to ensure your data is processed securely and in compliance with the GDPR. We do not sell or rent your personal data to third parties for marketing purposes.

Your Rights Under GDPR

As a customer of Stockwell Flowers, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If you believe that any data we hold about you is incorrect or incomplete, you can request corrections.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the original purpose.
• Right to Object: You may object to certain types of processing, such as direct marketing or processing based on legitimate interests.
• Right to Restrict Processing: Under certain conditions, you can request the restriction of how we process your data.
• Right to Data Portability: Where applicable, you can request your personal data be transferred to another provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. This will not affect prior lawful processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with data protection laws.

Application of This Policy

This Privacy Policy applies to all personal data collected from customers placing orders with Stockwell Flowers from Stockwell and neighbouring districts. If our services change, or if the law requires it, we may update this policy. Any changes will be noted in this policy and, where appropriate, communicated to you.

How to Exercise Your Rights or Contact Us

If you wish to exercise any of your rights under this policy or have queries regarding how we handle your data, you can contact us using the methods provided on our website or at the address displayed in our shop. We are committed to responding to all legitimate requests within one month.

Summary

Your trust is central to our business. Stockwell Flowers is committed to handling your data lawfully, fairly, and transparently. We encourage you to review this policy regularly and contact us if you have any questions about your personal data or this privacy notice.