Managing Your Personal Data at Cubitt Town Flowers

Privacy Policy - Cubitt Town Flowers

Introduction & Scope of Policy

This Privacy Policy outlines how Cubitt Town Flowers collects, uses, stores, and protects your personal information. We are committed to safeguarding your privacy and comply with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Cubitt Town Flowers in Cubitt Town and surrounding districts, whether through our website, by phone, or in person at our shop.

What Data We Collect

When you interact with Cubitt Town Flowers, we collect and process various types of personal data to deliver our products and services efficiently. The data we collect may include:

Identity Data: Name, title, and contact details (such as delivery address, billing address, and phone number).
Contact Data: Email address and telephone number (where provided).
Order and Transaction Data: Details of your purchases, preferences (e.g., flower choices, delivery times), and payment information (such as card details, though these are processed securely and are not stored by us).
Recipient Data: Name and delivery address of the person receiving the flowers, if different from the purchaser.
Communication Data: Any correspondence or feedback you provide to us, including messages you leave with your order.
Technical Data: IP address, browser type, and device information (if orders are placed online).

Lawful Basis for Data Processing

We process your personal data in compliance with Article 6 of the GDPR based on the following lawful bases:

Contractual Necessity: Processing is required to fulfill your flower order, manage payments, arrange delivery, and provide customer service.
Legal Obligation: We may be required to process and retain certain data to comply with laws (e.g., financial regulations, tax obligations).
Legitimate Interests: We may use your data to improve our services, communicate relevant updates or offers, detect and prevent fraud, or protect the security of our operations. We ensure any such use does not override your rights or interests.
Consent: Where we send marketing communications, we will only do so with your explicit permission, which you may withdraw at any time.

How We Use Your Data

We use your data for the following purposes:

To process and fulfill your flower orders, including delivering flowers to you or your chosen recipient.
To communicate with you about your orders or queries.
To manage payments, refunds, or billing matters.
To enhance our website and services based on customer preferences and feedback.
To meet obligations under applicable laws, such as accounting and record-keeping requirements.
For security and fraud prevention.
To send marketing information (if you have opted in).

Data Processors and Third Parties

In certain situations, we work with third party processors to help us deliver our services. These may include payment processors (for secure card transactions), technology providers (website hosting and email services), and delivery couriers. All third party service providers are required to handle your data in compliance with GDPR and only process data in accordance with our instructions and under strict confidentiality.

We do not sell or rent your personal data to any external company or individual. We only share data with trusted processors necessary to complete services we offer to you.

Retention of Your Data

We retain your personal data for as long as is necessary to fulfill the purposes for which it was collected. Typically, we keep order and transaction information for six years to comply with legal and accounting requirements. Contact and identity data provided for marketing purposes will be retained until you withdraw your consent. At the end of the retention period, your information will be securely deleted or anonymised.

Your Data Protection Rights

Under GDPR, you have several important rights available to you:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You have the right to have inaccurate or incomplete data corrected.
Right to Erasure: You may request that your personal data be deleted, subject to certain legal limitations.
Right to Restrict Processing: You may ask us to restrict the use of your data in certain circumstances.
Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.
Right to Data Portability: You can obtain and reuse your personal data for your own purposes, across different services.
Right to Withdraw Consent: Where we rely on your consent to process your data, you can withdraw this at any time.

To exercise any of these rights, please contact us using the details provided on our website or in store. We may need to verify your identity before responding to such requests.

Security Measures

We take the protection of your data seriously and have implemented appropriate technical and organisational measures to secure your personal information against loss, misuse, unauthorised access, disclosure, or destruction. These measures include restricted access, secure storage, and staff training in data protection practices.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in the law, our business operations, or data processing activities. The most current version will always be available on our website and in store. If material changes are made, we may also inform you directly.

Contact and Complaints

If you have any questions, concerns, or complaints about how your data is handled at Cubitt Town Flowers, please speak with us in person or use the contact information provided on our website. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.

This policy is effective as of the date shown at the top and covers all data collected in connection with orders at Cubitt Town Flowers in Cubitt Town and surrounding districts.