Flowers Harold Park Data Privacy Notice

Introduction

This Privacy Policy explains how Flowers Harold Park collects, uses, and protects your personal data when you place orders with us in Harold Park and the surrounding districts. We are committed to respecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

Scope of Policy

This policy applies to all individuals who place orders with Flowers Harold Park, either directly or through our various order channels, including our website, telephone line, or in person. It covers customers in Harold Park and the surrounding districts.

What Personal Data We Collect

When you interact with Flowers Harold Park, we may collect and process the following types of personal data:

  • Contact information: Full name, address, delivery address, postcode, and phone number.
  • Order details: The products you order, delivery instructions, order preferences, and messages included with orders.
  • Payment information: Information required to process your payment, such as card details. (We do not retain full card information after processing; see Processors section below.)
  • Correspondence: Information you provide when contacting us, including emails, calls, or in-person messages.
  • Technical data: If using our website, limited technical information such as IP address, browser type, and cookies (where applicable and permitted by you).

Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful basis for collecting and using your information. Our lawful bases are as follows:

  • Contractual necessity: To provide the products and services you request, process your order, deliver your flowers, or contact you about your order.
  • Legitimate interests: To maintain business operations, improve our products and services, and ensure security.
  • Legal obligations: To comply with obligations such as tax and accounting regulations.
  • Consent: For specific marketing activities where you have granted us explicit permission (you may withdraw your consent at any time).

How We Use Your Information

We use your information to:

  • Process and fulfil your orders, including contacting you about your order and delivering your flowers
  • Send order confirmations, delivery notifications, and follow-up customer service
  • Respond to your enquiries or complaints
  • Administer payments and process refunds
  • Improve our services by analysing trends and feedback
  • Comply with applicable laws and regulations
  • Where permitted, send you marketing communications about our services

Retention of Your Data

We retain your personal data only as long as necessary for the purposes outlined in this policy:

  • For order processing, your data is retained for six years following the last order, to comply with legal, tax, and accounting obligations.
  • For marketing purposes, your contact information is retained until you withdraw your consent or opt out.
  • Technical and analytical data is retained for up to two years for internal analysis, unless a longer retention is required by law.
  • Payment card details are not stored by us beyond the immediate transaction. Payment processing is handled securely by third-party processors (see below).

Data Processors and Third Parties

To fulfil your order and operate our business, we may share your data with trusted third parties acting as data processors. These include:

  • Payment service providers: To securely process your card transactions (we do not store your full card details).
  • Delivery partners or couriers: To deliver your orders efficiently.
  • IT support and website hosting: To maintain secure and reliable operations.
  • Professional advisors: Such as accountants or legal advisors as necessary to comply with legal obligations.

All processors are GDPR-compliant and required to handle your data securely and only according to our instructions. We do not sell or rent your personal data to any third party.

User Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access: You can request a copy of the information we hold about you.
  • Right to rectification: You can request corrections to inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data under certain circumstances.
  • Right to restrict processing: You can request that we restrict the processing of your data.
  • Right to data portability: You can request we transfer your data to another organisation or to you.
  • Right to object: You can object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent: Where you have given your consent, you may withdraw it at any time.

To exercise your rights, please contact us using the usual Flowers Harold Park contact channels.

Children’s Privacy

Flowers Harold Park does not knowingly collect or process data from children under the age of 16. If you believe we have inadvertently collected such data, please notify us so we can delete it promptly.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. These include secure payment processing, encryption, access controls, and regular reviews of our procedures and technologies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our business practices. The most current version will always apply. We encourage you to review this policy periodically before placing orders with us.

Contact and Complaints

If you have any questions or concerns regarding this Privacy Policy or your data, please contact us via the usual Flowers Harold Park contact methods. If you are unsatisfied with our response, you also have the right to lodge a complaint with the relevant supervisory authority for data protection in your jurisdiction.