Privacy Policy for Flowers Chessington Orders

Introduction

This Privacy Policy explains how Flowers Chessington (referred to as "we", "our", or "us") collects, uses, and safeguards the personal information of customers placing orders in Chessington and the surrounding districts. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and ensuring your privacy is protected throughout your engagement with us, whether placing a single order or using our services regularly.

Scope of the Privacy Policy

This policy applies to all customers ordering products from Flowers Chessington, both online and offline, including those in Chessington and the nearby districts. By placing an order or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.

What Data We Collect

We collect different types of personal data to process and fulfill your orders, communicate with you, and comply with our legal obligations. Depending on your interaction, we may collect the following categories of information:

• Identification Information: Full name, address (delivery and billing), and contact details (such as telephone number).
• Order and Transaction Information: Products ordered, order history, chosen delivery dates, payment status, and transaction records.
• Recipient Information: Name, address, and contact details of the person receiving the flowers (where provided by you).
• Communications: Correspondence with customer service, order instructions, and comments submitted via feedback forms.
• Technical Data: IP addresses, browser types, device information, and website usage data collected through cookies or analytics, to help us improve our online services.

We do not collect or store sensitive payment information such as credit or debit card numbers. Payments are processed securely through integrated third-party providers.

Purpose and Lawful Basis for Data Processing

Flowers Chessington collects and processes your personal information for the following lawful purposes:

• To Fulfill Our Contract: Most information is processed to enter into and carry out our contract with you, including processing your orders, arranging delivery, and managing payment. This is in line with Article 6(1)(b) UK GDPR.
• Legal Obligations: Certain information is processed to comply with laws and regulations, including tax and accounting records, per Article 6(1)(c) UK GDPR.
• Legitimate Interests: We may use your information to improve our services, manage our business operations, and handle customer enquiries, as allowed under Article 6(1)(f) UK GDPR. Our legitimate interests include providing high-quality service, protecting our business, and developing our products.
• Consent: On occasions where we rely on consent (such as for marketing communications), you have the right to withdraw your consent at any time.

How We Use Your Personal Data

Your information is used strictly for the purposes for which it was collected. Typical uses include:

• Processing and fulfilling floral orders (including communicating with you regarding your order and delivery status).
• Delivering flowers and related gifts to recipients named by you.
• Managing your customer account, where applicable.
• Customer support and resolving complaints or requests.
• Internal record keeping and reporting.
• Improving our products, services, and online experience.

Data Processors and Third Parties

To successfully deliver your orders and operate effectively, we may share necessary information with trusted third-party data processors. These may include:

• Courier and delivery services (for arranging the delivery of your flowers and gifts).
• Payment processing providers (to securely process your payments).
• IT and website hosting service providers (to manage our website and databases).
• Professional advisers, such as accountants, only where legally required.

All our third-party processors are carefully selected and required to maintain the security and confidentiality of your information. Your data will not be sold, distributed, or leased to unrelated third parties. We do not transfer your personal data outside of the United Kingdom, unless in circumstances where appropriate safeguards are implemented in accordance with UK GDPR.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. In general:

• Order and transaction data may be retained for up to 7 years in accordance with tax and financial regulations.
• Correspondence and order communications may be held for a maximum of 24 months after the completion of your order, to assist with queries or complaints.
• Technical and analytics data is kept only as long as necessary for website security and improvement purposes.

When your data is no longer needed, it will be securely deleted or anonymised.

Your Rights Under the UK GDPR

As a customer of Flowers Chessington, you have rights in relation to your personal data under UK GDPR. These include:

• The Right to be Informed: You have the right to know how and why your data is being processed.
• Right of Access: You can request a copy of any personal data we hold about you.
• Right to Rectification: You may ask us to correct or update inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you can request your data to be deleted.
• Right to Restrict Processing: You have the right to request we stop processing specific data in certain situations.
• Right to Data Portability: Where applicable, you can request your data be transferred to another provider.
• Right to Object: You can object to processing based on legitimate interests, or for direct marketing purposes.
• Right to Withdraw Consent: If we have asked for your consent, you can withdraw it at any time.

To exercise any of your rights, please get in touch using our contact channels on our website or in person at our store. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your rights are not being upheld.

Security of Your Data

We have implemented appropriate security measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. These include secure IT systems, regular staff training, and physical safeguards in store.

Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or the law. The latest version will always be available on our website and effective upon posting.

Contact and Queries

If you have questions about this Privacy Policy or our data protection practices, please use the published contact options on our website or visit us in-store. We are committed to protecting your privacy and upholding your rights as a valued customer of Flowers Chessington.