Privacy Policy – Flowers Belvedere

Our Commitment to Data Privacy

At Flowers Belvedere, we respect the privacy of all our customers. This Privacy Policy explains how we collect, use, store, and protect your personal data when you place an order with us from Belvedere and surrounding districts. It also outlines your rights under the General Data Protection Regulation (GDPR).

Scope of this Policy

This Privacy Policy applies to all customers placing orders with Flowers Belvedere, whether online, by phone, or in-person, for delivery or collection in Belvedere and the surrounding districts. By placing an order, you acknowledge and accept the practices described in this policy.

What Data We Collect

When you interact with Flowers Belvedere, we may collect the following categories of personal data:

• Identity Data: Your name and (where applicable) recipient’s name.
• Contact Data: Billing and delivery address, telephone number.
• Order Details: Products ordered, delivery instructions, card messages, and preferences.
• Payment Data: Limited payment information (such as the last four digits of your card number). We do not store full payment card details.
• Correspondence: Any communications with us, including messages or feedback.
• Technical Data: IP address, browser type, and device information collected when you use our website.

Lawful Basis for Processing Your Data

Flowers Belvedere processes your personal data based on the following lawful bases under Article 6 of the GDPR:

• Contractual Necessity: To process and deliver your orders, fulfill your requests, and handle payments.
• Legal Obligation: To comply with laws relating to tax, invoicing, and record-keeping.
• Legitimate Interests: For managing our customer relationship, improving our services, and for business operations (for example, quality control or statistical analysis). We ensure these interests do not override your fundamental rights and freedoms.
• Consent: In certain cases, such as sending marketing communications, we may process your data based on your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your data is used to:

• Process and deliver your flower orders.
• Contact you regarding your order or delivery.
• Maintain transaction and communication records for customer service and legal purposes.
• Improve and personalise your experience with Flowers Belvedere.
• Send updates, promotions, or newsletters (only if you have opted in).
• Comply with our legal and regulatory obligations.

Data Sharing and Processors

Your personal data may be shared with trusted third-party service providers ("processors") that assist us in delivering our services. These may include:

• Payment processing companies (for handling secure transactions)
• Delivery partners or couriers (to fulfill local deliveries)
• IT and cloud service providers (for secure data hosting and website operation)
• Professional advisors, such as accountants or legal counsel (for compliance and audits)

All processors are required to comply with GDPR, maintain the confidentiality of your data, and process it only under our instructions. We never sell or lease your data to third parties for marketing purposes.

International Transfers

Your personal data is stored on secure servers located within the UK or the European Economic Area (EEA). If data needs to be processed outside this area, we ensure appropriate safeguards are in place in line with GDPR requirements.

Data Retention

We hold your personal data only for as long as necessary to fulfill the purposes outlined in this policy and comply with our legal and regulatory obligations. Typically, order and transaction data are retained for up to six years to meet accounting and tax requirements. Marketing opt-in records are retained until you withdraw your consent. When retention is no longer necessary, we will securely delete or anonymise your data.

Your Data Protection Rights

Under GDPR, you have the following rights in relation to your personal data held by Flowers Belvedere:

• Right to Access: Request access to the personal data we hold about you.
• Right to Rectification: Request correction of any incomplete or inaccurate data.
• Right to Erasure: Request deletion of your personal data where there is no legal reason for us to continue holding it.
• Right to Restrict Processing: Request restriction of processing your data in certain circumstances.
• Right to Data Portability: Receive a copy of your data in a commonly used, machine-readable format.
• Right to Object: Object to processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us via the methods set out on our website or in your order confirmation documentation. We may need to verify your identity before fulfilling your request.

Keeping Your Data Secure

We have implemented appropriate physical, electronic, and managerial procedures to protect your data from loss, theft, accidental destruction, or unauthorised access. While we strive for full security, please note that no system can guarantee absolute safety.

Policy Updates

We may update this policy from time to time to reflect changes in our practices or legal obligations. The latest version will be posted on our website and is effective from the published date.

Contact and Complaints

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us using the details provided on our website or your order confirmation. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority, should you feel your rights are not being upheld.

Thank you for placing your trust in Flowers Belvedere.