Wandsworth Flowers Customer Privacy Statement

Introduction

This Privacy Policy sets out how Wandsworth Flowers (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you place orders with us from Wandsworth and the surrounding districts. We adhere to the UK General Data Protection Regulation (GDPR) and other applicable data protection laws, ensuring your information is handled securely and transparently. Please read this policy carefully to understand our approach to your data.

Scope of this Policy

This policy applies to all individuals placing orders for products or services from Wandsworth Flowers, whether through our website, in-store, or by phone, specifically serving customers from Wandsworth and neighbouring districts. If you proceed to place an order or interact with us regarding an order, this policy will govern the way your personal data is managed.

What Data We Collect

When you interact with us or place an order, we may collect the following categories of personal data:

• Contact Details: name, delivery address, billing address
• Order Information: items ordered, delivery instructions, order notes
• Payment Details: cardholder name, partial payment information (we do not store your full card details; these are processed securely via our payment processors)
• Communication Records: correspondence sent by you regarding orders (emails, online forms, letters, or recorded calls where applicable)
• Marketing Preferences: your preferences for receiving promotional communications from us (if you choose to opt-in)
• Technical Data: IP address, browser details, device identifiers, and browsing activity on our website (collected via cookies and analytics tools)

Lawful Basis for Processing Personal Data

Under the GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following bases:

• Contractual Necessity: Most personal data we process is necessary for entering into and fulfilling our contract with you (e.g., to accept your order, deliver flowers, process payments, and provide customer service).
• Legitimate Interests: We may use your data for certain internal administrative purposes, fraud prevention, or to improve our services, where these do not override your rights and freedoms.
• Legal Obligation: Occasionally, we are legally required to process certain personal information, for example for tax or accounting purposes.
• Consent: For activities not covered by the above bases, such as receiving marketing messages, we will seek your explicit consent, which you can withdraw at any time.

Retention of Personal Data

Your personal data is only retained for as long as is necessary for the purposes for which it was collected. Generally, we retain:

• Order and contact details for a period of seven years, to comply with legal, accounting, and tax obligations.
• Marketing preferences until you inform us that you no longer wish to receive such communications.
• Technical and analytic data is typically kept for up to two years from your last interaction with our website.

After these periods, your data is securely deleted or anonymised.

Processors and Data Sharing

In the course of fulfilling your orders and supporting our business, we may share your personal information with trusted third-party service providers (“processors”) who perform services on our behalf, such as:

• Payment processing companies (for secure transaction handling)
• Delivery and courier partners (to manage and track order deliveries)
• IT and website support providers (for hosting, maintenance, and technical support)
• Professional advisors (such as auditors, legal, or accounting services when necessary)
• Analytics and marketing service providers (to help us improve your experience and send communications if you have opted in)

We require all processors to respect the security and confidentiality of your data and comply with applicable data protection laws. We do not allow our third-party processors to use your data for their own purposes and only permit them to process your data for specified purposes in accordance with our instructions.

Your data is not routinely transferred outside of the UK or European Economic Area. If, for technical reasons, transfer outside these areas is necessary, appropriate safeguards will be implemented as required by the GDPR.

Your Rights Under the GDPR

The GDPR provides you with a range of rights regarding your personal information. As a data subject, you have the following rights under certain circumstances:

• Access: You may request access to your personal data and receive information about how we process it.
• Rectification: You can request correction of inaccurate or incomplete data we hold about you.
• Erasure: You may ask for your data to be erased where there are no overriding legal grounds for us to retain it.
• Restriction: You can request restriction of processing where certain conditions apply.
• Data Portability: You may have the right to receive your data in a portable format, to transfer to another service provider.
• Objection: You can object to the processing of your data, including direct marketing at any time.
• Withdrawal of Consent: If our processing is based on consent, you may withdraw this consent at any time. This will not affect the lawfulness of any processing carried out before your withdrawal.

To exercise any of your rights, please contact us using the methods listed on our website or any other official communication channels.

Data Security

We take data security seriously and have implemented appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. Measures include secure payment gateways, encrypted data storage, and access controls for employees and processors.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. The current version will always be available in store and on our website. We encourage you to review the policy periodically to stay informed about how your information is protected.

Contact and Complaints

If you have any questions about this Privacy Policy or our data handling practices, or if you wish to make a complaint, please contact us via the contact details provided on our website. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), if you are not satisfied with our response.

Thank you for trusting Wandsworth Flowers with your personal information. We are committed to safeguarding your privacy and handling your data responsibly.