Fulham Flowers Privacy Policy

Introduction

At Fulham Flowers, your privacy is important to us. This Privacy Policy describes how we collect, use, store, and share your personal data in compliance with the General Data Protection Regulation (GDPR). The policy specifically applies to all customers and individuals placing orders in Fulham and surrounding districts. We explain our data practices transparently, including what information we collect, our lawful bases for processing, who has access to your data, and your individual rights.

What Personal Data We Collect

When you place an order or interact with Fulham Flowers, we may collect the following personal data:

• Contact Information: Such as your name, delivery address, and phone number
• Order Details: Including recipient’s name and delivery address, product choices, order value, and message card content
• Payment Information: Such as payment method and transaction identifiers (note: payment details are handled via secure, GDPR-compliant payment processors; we do not store your full card or bank information)
• Communications: Correspondence with customer service, including feedback or queries
• Technical Data: IP address, device type, and usage statistics when you use our website (for security and analytical purposes)

Lawful Basis for Processing Your Data

According to GDPR, we must have a legal basis for processing your personal data. At Fulham Flowers, we rely on the following lawful bases:

• Contractual Necessity: Most information we collect is required to process and fulfill your order. Without it, we cannot provide our services.
• Legitimate Interests: We may use your data for our legitimate business interests, such as improving our services, preventing fraud, and ensuring network and information security, provided these interests are not overridden by your rights and interests.
• Legal Obligation: Where necessary, we may process or retain data to comply with legal or regulatory obligations, such as tax requirements or consumer protection laws.
• Consent: In cases where we require your explicit permission—such as sending marketing communications—you will always be asked beforehand and can withdraw consent at any time.

How We Use Your Information

The personal data we collect is used for the following purposes:

• Processing, fulfilling, and delivering your flower orders
• Communicating with you about your order or responding to your inquiries
• Improving our products, services, and customer experience
• Carrying out internal administration, accounting, and recordkeeping
• Meeting legal and regulatory requirements
• Sending you updates about our services or promotions (only if you have consented)

Data Retention

We retain your personal data only for as long as necessary for the purposes outlined above, including to fulfill orders, resolve disputes, enforce agreements, and meet legal obligations. For most order-related data, we will retain your information for up to seven years to comply with recordkeeping and legal requirements. For marketing communications, your data will be retained until you withdraw consent or request deletion. Technical or analytical data may be anonymized and retained for a longer period for security and statistical purposes.

Data Processors and Third Parties

We may share your personal data with trusted third-party service providers who assist us in delivering our services. These data processors are required to comply with GDPR, maintain the confidentiality of your data, and only process information required to perform their contractual obligations. Examples include:

• Delivery and courier partners who handle order delivery to your specified address
• Payment processing providers who handle secure payment transactions
• IT and website hosting partners who provide the technology infrastructure for our online services
• Accountancy and legal advisors, where necessary for compliance

We do not sell or share your personal information with third parties for their own marketing purposes.

International Data Transfers

Wherever possible, we store and process your data within the United Kingdom and the European Economic Area (EEA). If any service provider processes your data in a country outside the EEA, we ensure appropriate safeguards are in place to protect your rights, as required by GDPR.

Security of Your Data

We take the security of your personal data seriously and implement technical and organizational measures to protect it from unauthorized access, loss, alteration, or misuse. These measures include secure server technologies, regular security reviews, staff training, and restricted data access on a need-to-know basis.

Your Rights Under GDPR

Under the GDPR, you have various rights over your personal data. These include:

• The right to access your personal data and receive a copy
• The right to rectify inaccurate or incomplete information
• The right to erase your data where applicable (the ‘right to be forgotten’)
• The right to restrict processing in certain circumstances
• The right to object to processing based on legitimate interests or for direct marketing purposes
• The right to data portability, enabling you to receive your data in a commonly used format and transmit it to another provider
• The right to withdraw consent at any time for processing carried out on the basis of your consent
• The right to lodge a complaint with the Information Commissioner’s Office if you believe your rights have been violated

How to Exercise Your Rights

If you would like to exercise any of your GDPR rights, please contact us using the contact methods provided on our website. We will respond to your requests in accordance with applicable law and within one month. In some cases, we may ask for further proof of identity to protect your privacy.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data practices. Any significant changes will be communicated to you visibly on our website. We recommend reviewing this policy periodically to stay informed on how we protect your information.

Contacting Fulham Flowers

If you have any questions or concerns about this Privacy Policy or how we process your data, please get in touch using the details on our website. Our team is committed to protecting your privacy and will address your concerns as promptly as possible.