Clapham Flowers Privacy Policy

Introduction

This Privacy Policy explains how Clapham Flowers collects, uses, stores, and protects personal data of all customers placing orders with us from Clapham and surrounding districts. We are committed to ensuring that your privacy is protected and that your personal information is handled responsibly and in accordance with the General Data Protection Regulation (GDPR) and any applicable UK data protection legislation.

What Data We Collect

When you place an order with Clapham Flowers, we collect and process the following categories of personal data as required to fulfil your request:

• Identity Data: Full name
• Contact Data: Delivery address, billing address, phone number (optional), recipient name and address (if different), and, if provided, any personalized message for the card included with flowers
• Order Data: Order details, purchase history, delivery instructions
• Payment Data: Certain payment or transaction details (note: we do not store full card numbers; all payments are processed through regulated payment processors)
• Technical Data: IP address, device type, browser information collected through cookies or similar technologies when you use our digital services
• Correspondence Data: Customer queries, feedback, or complaints received through communication channels

Lawful Basis for Processing Your Data

We only process your personal data where we have a lawful basis to do so under Article 6 of the GDPR. These bases include:

• Performance of a Contract: Most of the data collected is necessary for us to process, fulfil, and deliver your order, and to communicate with you regarding your purchase.
• Legal Obligation: We may need to process certain information to comply with legal and regulatory requirements, such as financial record keeping.
• Legitimate Interests: We may use your data for our legitimate business interests, such as improving our products and services, managing feedback, or direct marketing to previous customers (where permitted by law).
• Consent: For optional marketing communications via email or SMS, we will only contact you if you have given your consent, which you can withdraw at any time.

How We Use Your Data

We use your personal information for the following purposes:

• To process and deliver your floral orders
• To communicate with you about your order status or in response to your queries
• To handle payment processing securely
• To improve our services and your customer experience
• To send optional marketing communications (if you have opted in)
• To comply with financial and legal obligations

Retention of Your Data

We retain your personal information only as long as it is necessary for the purposes for which it was collected, or as may be required by law (such as for tax and accounting purposes). Typically, customer order data is kept for a maximum of seven years after your last purchase, unless legal or regulatory reasons require a longer retention period. After this period, your data will be securely deleted or anonymized so it can no longer be associated with you.

Processors and Data Sharing

Clapham Flowers may share your personal data with trusted third-party service providers to help us operate effectively and fulfil your orders. These data processors include:

• Payment service providers to process transactions securely
• IT and system support providers to maintain our order systems and website
• Delivery partners or couriers for order fulfilment
• Marketing service providers where you have opted in to receive communications

All third-party service providers are required to respect the security of your personal data, act only on our instructions, and comply with applicable data protection laws. We do not sell or rent your personal information to any third party for marketing purposes.

Data Security

We take the security of your information seriously. We have put in place appropriate physical, electronic, and administrative safeguards to protect your information from unauthorized access, loss, misuse, or disclosure. Access to your personal data is strictly limited to those employees and service providers who need it to perform their duties in connection with your order.

Your Data Protection Rights

Under the GDPR, you have the following data protection rights:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You can request that any inaccurate or incomplete information we hold about you be corrected.
• Erasure: You may ask us to delete your personal data under certain circumstances (“the right to be forgotten”).
• Restriction: You can ask us to restrict the processing of your data in certain situations.
• Objection: You have the right to object to our processing of your data, particularly where we process it for legitimate interests or direct marketing.
• Portability: You may request to receive a copy of your personal data in a commonly used, machine-readable format, and/or ask us to transfer it to another data controller where technically feasible.

If you wish to exercise any of these rights, please contact us via the methods outlined on our website. We may need to verify your identity before fulfilling your request. Response times will comply with applicable GDPR requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or for other operational reasons. The latest version will always be available on our website and will state the date of the most recent revision. We encourage you to review this policy regularly to stay informed about how we protect your information.

Applicability

This Privacy Policy applies to all personal data collected from customers who place orders with Clapham Flowers in Clapham and surrounding districts. By placing an order, you acknowledge that you have read and understood this policy. Your privacy and trust are of paramount importance to us, and we are dedicated to ensuring your information is treated with the utmost care and respect.