Dagenham Flowers Privacy Policy

Introduction

This Privacy Policy explains how Dagenham Flowers collects, uses, stores, and protects your personal information. It applies to all individuals who place an order with Dagenham Flowers in Dagenham and the surrounding districts. We are fully committed to complying with the UK General Data Protection Regulation (GDPR) and ensure your data is managed respectfully and transparently.

What Data We Collect

When you place an order or interact with Dagenham Flowers, we may collect the following categories of personal information:

Contact Details: Such as your name, address, and telephone number.
Order Information: Including delivery addresses, recipient information, card messages, and order notes.
Payment Information: Processed securely via approved payment processors (please note, we do not retain your credit or debit card numbers after payment is processed).
Communication Records: Any correspondence, feedback, or reviews you provide.
Technical Data: Including IP address, browser type, and device identifiers collected through website usage to improve our services and security.

Lawful Basis for Processing

Dagenham Flowers processes your personal data under several lawful bases as defined by GDPR:

Contractual Necessity: Most data we collect is required to fulfil our contractual obligation to deliver your flower order and communicate relevant information concerning your purchase.
Legal Obligations: We may process and retain data as required by legal or tax authorities.
Legitimate Interests: We may use your data to improve our services, respond to queries, prevent fraud, or ensure the security of our website and operations. These activities do not override your fundamental rights and freedoms.
Consent: Where you have given explicit consent (e.g., for marketing communications), you have the right to withdraw this consent at any time.

Retention of Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The specific retention periods depend on the type and use of data but will generally follow these guidelines:

Order Records: Retained for up to seven years to comply with applicable tax and accounting laws.
Correspondence: Retained for up to two years unless required longer for legal reasons.
Marketing Preferences: Kept as long as you remain opted-in to our communications. You can update or remove your preferences at any time.

After these periods, your data will be securely deleted or anonymised.

Use of Data Processors

Dagenham Flowers sometimes uses external service providers (data processors) to support our business. These processors may include:

Website hosting providers
Payment processing companies
IT and database support services
Couriers and delivery partners

All of our data processors are carefully selected and bound by GDPR-compliant agreements. They only process data on our instructions and are not permitted to use it for their own purposes.

Your Rights Under GDPR

As a Dagenham Flowers customer, you have a number of rights under GDPR with respect to your personal data, including:

Access: You can request access to the personal data we hold about you.
Rectification: If any information is inaccurate or incomplete, you may ask us to correct it.
Erasure: You may request deletion of your information when there is no longer a lawful ground for retaining it; subject to certain legal exemptions.
Restriction: You have the right to request restriction of processing in certain circumstances.
Objection: You may object to certain uses of your data, such as direct marketing.
Data Portability: Where applicable, you can request your data in a structured, commonly used electronic format.
Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, you can contact us using the communication methods set out in your order confirmation or delivery paperwork. We respond to all legitimate requests within one month.

Data Security

We have put in place appropriate technical and organisational measures to safeguard your personal data from unauthorised access, alteration, disclosure, or destruction. This includes secure servers, encryption protocols, regular staff training, and access controls.

International Transfers

Dagenham Flowers primarily processes your data within the United Kingdom. If, on rare occasions, your data is transferred outside the UK for technical reasons, we ensure that adequate safeguards are in place in accordance with GDPR requirements to ensure your data remains protected.

Changes to This Privacy Policy

This policy may be reviewed and updated periodically to ensure ongoing compliance and transparency. You are encouraged to check for updates periodically whenever placing an order. Any significant changes will be communicated to customers where required by law.

Contact and Complaints

If you have questions about this Privacy Policy or how your personal data is handled by Dagenham Flowers, please use the contact details provided with your order confirmation. If you believe your data protection rights have not been upheld, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).