Privacy Policy for Flowers Motspur Park Orders

Introduction

This Privacy Policy explains how Flowers Motspur Park collects, uses, stores, and protects your personal information in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Motspur Park from Motspur Park and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your information is processed lawfully and transparently.

What Data We Collect

When you place an order or interact with Flowers Motspur Park, we may collect the following types of personal data:

  • Identification Details: Name, title, and contact details, such as postal address and delivery address.
  • Contact Information: Telephone number (if provided), and any other contact details necessary for processing your order.
  • Order Information: Details of your order, delivery instructions, recipient names, and any messages to be delivered with your flowers.
  • Payment Information: Payment method and transaction details (Note: payment card details are processed directly by secure payment processors and are not stored by Flowers Motspur Park).
  • Communication Records: Information from your enquiries, feedback, and any correspondence with us regarding your order.

Lawful Basis for Processing Data

Under GDPR, we must have a lawful basis to collect and process your personal data. For our flower ordering and delivery services, we rely on the following lawful bases:

  • Contractual Necessity: Most of your personal data is processed to fulfill your order, confirm details, process payment, and deliver flowers as requested. Without this data, we cannot provide the service.
  • Legal Obligations: We may process some data to comply with legal and regulatory requirements, such as accounting and record keeping.
  • Legitimate Interests: On occasion, we may use your data to improve the quality of our service or respond to your enquiries, while ensuring this does not override your rights and interests.
  • Consent: Where legally required, we may seek your explicit consent, especially for marketing communications. You have the right to withdraw consent at any time.

How We Use Your Data

Your personal data is only used for the specific purposes for which it was collected. These purposes include:

  • Processing and fulfilling your flower order, including delivery and communication about your order status.
  • Handling payment and confirming transactions.
  • Providing customer service and addressing your feedback or queries.
  • Complying with any legal obligations.
  • Improving our services, processes, and customer experience (where appropriate and permitted by law).

Data Processors and Data Sharing

We may use carefully selected third-party service providers (“data processors”) to assist us in delivering our services. These may include:

  • Payment Processors: To securely process your payment information in compliance with industry standards.
  • IT & Cloud Hosting Providers: To host and maintain our ordering systems and manage data securely.
  • Delivery Partners: Where necessary, to ensure timely delivery of your flowers.

All processors are required to handle your personal data solely on our instructions, implement appropriate security measures, and are bound by confidentiality agreements. Flowers Motspur Park does not sell, trade, or disclose your personal data to third parties for marketing purposes.

Data Retention

We hold your personal information only for as long as necessary to fulfill the order and for legitimate business or legal purposes. Typically, we will retain order details and associated personal data for up to six years to comply with accounting and legal requirements. After this period, your data will be securely deleted or anonymised unless a longer retention period is lawfully required.

Data Security

Flowers Motspur Park implements appropriate security measures to protect your information from unauthorised access, alteration, disclosure, or destruction. This includes secure handling of order details, encrypted payment processing through trusted partners, and regular review of our data protection policies and practices.

Your Rights Under GDPR

As a customer ordering from Motspur Park and surrounding districts, you have the following rights under GDPR:

  • The right to be informed about how your data is used.
  • The right of access to your personal data and to request a copy of it.
  • The right to rectification if your data is inaccurate or incomplete.
  • The right to erasure ("right to be forgotten") in certain circumstances.
  • The right to restrict processing of your data in specific situations.
  • The right to data portability where technically feasible.
  • The right to object to certain types of processing, such as direct marketing (although we do not currently process data for such purposes without consent).
  • Rights related to automated decision-making, which we do not use in our order processing.

To exercise your rights, or if you have questions about our privacy practices, you may contact us using the details provided when you placed your order or on our website.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our processes, legal requirements, or customer feedback. The date of the most recent revision will be indicated at the end of this document. We recommend you review this Policy periodically when placing orders with Flowers Motspur Park.

Contact and Queries

If you have any concerns or would like more information about how we handle your personal data, please refer to the contact details available on our ordering pages or speak with our staff in person. We will respond promptly and ensure your rights are respected.

Last updated: June 2024