Erith Flowers Privacy Policy for Customers

Name: PINK POP
Brand: Erith Flowers
Price: 72.00 GBP
Availability: InStock

Introduction

This Privacy Policy outlines how Erith Flowers collects, uses, stores, and safeguards personal data for all customers placing orders from Erith and its surrounding districts. We are committed to handling your data in accordance with the law, with particular reference to the General Data Protection Regulation (GDPR).

What Data We Collect

In order to process your order and provide an excellent service, we may collect the following personal data from you:

Name: To identify customers and recipients.
Contact Information: Including phone number, address, and (where applicable) delivery address and recipient contact details.
Payment Details: Such as card information or other payment method data (handled securely by payment processors).
Email Address: For order confirmation, updates, and customer communications.
Order Details: Including product choices, personal messages, and delivery instructions.
Correspondence: Records of contact with our customer services, including queries and complaints.
Technical Data: Such as IP addresses, device type, and browser information collected via our website for security and analytics.

Lawful Basis for Processing Your Data

Erith Flowers collects and processes your data on the following lawful bases:

Contractual Necessity: Processing is required to fulfil your order and any requests related to it.
Legal Obligation: In some cases, we must retain certain information to comply with legal and taxation requirements.
Legitimate Interests: We use data to improve our services, prevent fraud, and ensure the security of transactions, provided these interests do not override your rights or interests.
Consent: For certain communications (such as marketing), we will ask for your explicit consent.

How We Use Your Personal Data

We use your personal data in the following ways:

Order Processing: To accept and fulfil your orders, including managing payment, delivery, and customer requests.
Customer Support: To respond to enquiries, resolve issues, or provide updates about your order.
Marketing Communications: To send information about our products or promotions when you have opted in to receive these.
Service Improvement: To analyse patterns and trends for business improvement purposes (using aggregated or anonymised data where possible).
Legal and Regulatory Compliance: To comply with our legal obligations and respond to lawful requests from authorities.

How We Share Your Data

Your personal data is treated with the utmost care and is not sold to third parties. However, we may share your data with trusted third parties (processors) who assist in providing our services, including:

Payment Processors: Secure companies that handle payment transactions on our behalf.
Delivery Partners: Couriers or delivery companies used to dispatch your orders.
IT Support and Hosting Providers: Companies who help maintain the security and functionality of our website and order processing systems.
Professional Advisers: If required, such as accountants or legal advisers, for compliance and record-keeping.

We ensure that all processors and service providers operate under strict contractual agreements that require them to handle your data in accordance with applicable data protection laws.

International Transfers

Your data is processed within the UK and the European Economic Area (EEA). If data must be transferred outside these areas for operational reasons, we ensure data protection safeguards are in place, consistent with GDPR requirements.

Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy. In most cases:

Order Records: Kept for up to 7 years to comply with accounting and tax regulations.
Marketing Preferences: Retained until you withdraw consent or opt out.
Customer Queries: Kept for up to 3 years from the date of last correspondence.

When personal data is no longer needed, it will be securely deleted or anonymised.

Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Rectification: Request corrections to any inaccurate or incomplete data.
Erasure: Ask for your data to be deleted when it is no longer required or if you withdraw consent (where consent was used as a lawful basis).
Restriction: Ask us to limit processing in certain circumstances.
Objection: Object to certain types of processing, such as direct marketing.
Data Portability: Ask for your data in a machine-readable format to transfer to another company (where technically feasible).
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
Complain: Lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly.

Children’s Privacy

Erith Flowers does not knowingly collect or process personal data from individuals under the age of 16 for order-placing purposes. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

How We Protect Your Data

We implement a range of technical and organisational security measures to safeguard your personal data against loss, theft, and unauthorised access or disclosure. These measures may include encryption, secure server storage, regular software updates, and staff training. Access to personal data is restricted to authorised staff and approved service providers only.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. Any changes will be made available on our website, and we encourage you to review this policy periodically.

Contact and Further Information

If you have questions about how we handle your personal data or would like to exercise your rights, please contact us using the details provided on our website.