Privacy Policy for Customers of Brockley Flowers

Introduction

This Privacy Policy explains how Brockley Flowers collects, uses, stores, and protects the personal data of customers placing orders from Brockley and nearby districts. We are committed to safeguarding your privacy and handling your data in a lawful, transparent, and fair manner according to the General Data Protection Regulation (GDPR).

Scope of This Policy

This policy applies to all individuals who place orders with Brockley Flowers, whether via our website, in person, or over the phone, from Brockley and surrounding areas. By placing an order, you acknowledge and agree to the practices described in this Privacy Policy.

Personal Data We Collect

In order to fulfill your orders and provide you with the best possible service, Brockley Flowers collects and processes the following categories of personal data:

  • Contact Information: Such as your full name, delivery address, billing address, and telephone number.
  • Order Details: Including product selections, special instructions, order history, and preferences.
  • Payment Information: Such as payment card details, but only as required for transaction processing. Card data is never stored by Brockley Flowers.
  • Communication Data: Includes records of communications between you and Brockley Flowers, such as queries, feedback, and correspondence concerning your order.
  • Technical Information: Limited data about your interaction with our website, such as IP address, browser type, and access times, collected via cookies or similar technologies.

Lawful Basis for Processing

We only use your personal data where we have a valid legal reason to do so. The lawful grounds under the GDPR on which Brockley Flowers relies include:

  • Contractual Necessity: Most information is processed to fulfill our contractual obligations to you, including taking and delivering your order and handling payment.
  • Legal Obligation: Some information is required to comply with laws and regulations relating to business records, tax, or fraud prevention.
  • Legitimate Interests: We may process limited data for our legitimate business interests, such as improving our services, maintaining security, and handling customer queries.
  • Consent: Where we rely on your consent (for example, marketing communications), you have the right to withdraw consent at any time.

How We Use Your Information

Your data is used for the following purposes:

  • Processing and delivering orders placed with Brockley Flowers.
  • Communicating with you about your order or responding to your enquiries.
  • Managing and resolving customer service queries and complaints.
  • Improving our products and services based on feedback and purchase history.
  • Complying with legal requirements and obligations.
  • With your permission, sending marketing communications about Brockley Flowers offerings and promotions, which you may opt out from at any time.

How Your Data Is Stored and Protected

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Data is stored securely on systems with limited access and only shared with staff or trusted service providers as necessary for processing your order or managing business operations.

Data Retention

Brockley Flowers will only retain your personal data for as long as it is necessary to fulfill the purposes outlined above:

  • Order and transaction data is generally retained for up to seven years to comply with legal and accounting requirements.
  • Communications (such as customer emails and correspondence) are retained for up to three years for record-keeping and query resolution.
  • Marketing preferences are kept until you withdraw consent or opt out of receiving communications.

After these periods, personal data is securely deleted or anonymised.

Data Processors and Third Parties

To provide certain services, we may share your personal data with trusted third-party processors. These may include:

  • Payment processing providers for handling transaction payments.
  • IT and website hosting providers for data storage and site operation.
  • Delivery services and couriers for fulfilling flower deliveries.
  • Professional advisers such as accountants for legal and tax compliance.

All third-party processors are required to comply with data protection laws and only process your data according to our instructions. We never sell your personal data to third parties.

Your Rights Under GDPR

As a customer, you have the following data protection rights:

  • Right to Access: You can request a copy of your personal data held by Brockley Flowers.
  • Right to Rectification: You can ask us to correct or update your information if it is inaccurate or incomplete.
  • Right to Erasure: You can request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to Restrict Processing: You may request that your data is no longer processed in certain circumstances.
  • Right to Object: You can object to processing based on our legitimate interests, or for direct marketing purposes.
  • Right to Data Portability: You can request that we provide your data in a structured, commonly used, machine-readable format.

Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable laws. Any changes will be effective upon posting of the revised policy. We recommend reviewing this page periodically to stay informed about how we protect your data.

Contacting Brockley Flowers

If you have questions about this Privacy Policy, how your data is managed, or wish to exercise your GDPR rights, please contact us via the methods provided on our website or in-store. We are committed to responding promptly and addressing your concerns.