Wimbledon Flowers Customer Privacy Policy

Introduction

At Wimbledon Flowers, we are committed to safeguarding the privacy of all our customers placing orders from Wimbledon and its surrounding districts. This Privacy Policy explains how and why we collect, use, retain, and share your personal information in accordance with the General Data Protection Regulation (GDPR). We also set out your data privacy rights and our obligations to you. Please review this policy carefully before placing an order or using our services.

What Data We Collect

Wimbledon Flowers collects and processes various types of personal data to fulfill your orders and provide excellent customer service. The types of data we collect include:

• Contact Information: Name, address, and phone number of both the sender and recipient, as required for successful delivery.
• Order Details: Information about your order such as bouquet choices, delivery instructions, and any personal messages provided.
• Payment Information: Transaction data (e.g., payment confirmation, payment method) processed securely via our trusted payment providers. We do not store your full payment card details on our servers.
• Account Information: If you create an account with us, we collect your login details and order history.
• Communication Data: Records of communication with us, including customer service correspondence and order updates.
• Technical Data: Your IP address, browser type, and usage data, collected via cookies and similar technologies to improve our website’s performance and usability.

Lawful Basis for Processing

We process your personal data only when lawful grounds apply, as stipulated by the GDPR. Our lawful bases are:

• Contractual Necessity: To fulfill your order and deliver products as requested. Without your data, we would be unable to process and deliver flower orders.
• Legal Obligations: To comply with legal, accounting, and tax obligations, such as retaining transaction records for regulatory purposes.
• Legitimate Interests: To improve our services (such as analyzing usage to enhance customer experience), safeguard our operations, and prevent fraud, provided your interests and fundamental rights do not override these interests.
• Consent: In cases where none of the above bases apply (for example, direct marketing), we will always seek your explicit consent before processing your data for that purpose. You may withdraw your consent at any time.

How We Use Your Data

Your data is used strictly for the purposes outlined below:

• Processing and delivering your flower orders
• Providing customer support and responding to your enquiries
• Sending order confirmations and delivery updates
• Processing payments and detecting or preventing fraud
• Improving and optimizing our website and services
• Carrying out legal and regulatory obligations
• Communicating promotional offers (only if you have given consent)

Who Has Access to Your Data (Processors)

We may share your personal data with certain trusted third parties ('processors') who help us provide our services. These include:

• Payment Providers: Process your payment details securely to complete transactions.
• Delivery Partners: Assist in delivering your order to the correct recipient address.
• IT and Website Hosting Providers: Host our website, store data securely, and provide technical support.
• Professional Advisors: Such as accountants or legal advisors, when necessary to comply with legal obligations.

All processors are carefully selected and contractually bound to protect your data, process it only on our instructions, and maintain confidentiality and security consistent with the GDPR.

Data Retention

Wimbledon Flowers will retain your personal data only for as long as is necessary for the purpose for which it was collected, as well as to comply with legal, accounting, or reporting requirements. The standard retention periods are:

• Order and Transaction Records: Maintained for up to six years to meet legal and regulatory obligations.
• Account Data: Retained for as long as your account is active. If you close your account, we retain relevant data only as long as is required by law or for defense against legal claims.
• Marketing Data: Retained only while you remain subscribed, or until you withdraw your consent for marketing communications.
• Website Usage Data: Retained for analytics purposes for a maximum of 12 months.

Once the relevant retention period expires, your personal data is securely deleted or anonymized.

Your Data Protection Rights

Under the GDPR, you have important data protection rights, which include:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain circumstances ('right to be forgotten').
• Right to Restrict Processing: Request to limit processing of your data in certain situations.
• Right to Data Portability: Request transfer of your data to another organization or directly to you.
• Right to Object: Object to processing where we are relying on legitimate interests or to direct marketing.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided on our website. We strive to respond to all valid requests within one month.

Data Security

We use appropriate organizational and technical measures to protect your data from unauthorized access, alteration, disclosure, or loss. Access to personal data is restricted to employees and contractors who need it to perform their job functions and are bound by confidentiality obligations.

International Data Transfers

Wimbledon Flowers does not routinely transfer personal data outside the United Kingdom. Should any transfer of data occur to a country outside the UK or EEA, we ensure such transfers are protected by appropriate safeguards in compliance with GDPR requirements.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or the way we handle your data. The most current version will always be available on our website, and we encourage you to review it periodically.

Applicability

This Privacy Policy applies to all customers placing Wimbledon Flowers orders from Wimbledon and the surrounding districts. By using our services, you acknowledge and agree to the processing of your personal data as described in this policy.