Blackwall Flowers Privacy Policy - GDPR Information for Customers
Our Commitment to Your Privacy
At Blackwall Flowers, we are dedicated to safeguarding the privacy of our customers. This Privacy Policy explains how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws. The policy applies to all customers placing Blackwall Flowers orders in Blackwall and surrounding districts, whether orders are made in person, via telephone, or through our website.
Personal Data We Collect
When you place an order or interact with us, we may collect the following personal data:
- Identification Details: Your full name and, if ordering for someone else, the recipient's name.
- Contact Information: Address for delivery, relevant billing address, telephone number, and (when provided) email address.
- Order Details: Information on products ordered, any specific delivery instructions, and gift messages.
- Payment Information: Payment method and transaction details (note: we do not store full card details).
- Communications: Records of correspondence, including order queries and feedback.
We do not intentionally collect sensitive data (such as health or biometric data) unless required by law or expressly provided by you for the fulfilment of your order.
Lawful Bases for Processing
We collect and process personal data only when we have a valid legal basis to do so under GDPR. The lawful bases on which Blackwall Flowers relies include:
- Contractual necessity: To fulfil and deliver your flower order, process payments, and manage customer service queries.
- Legal obligation: To comply with financial, tax, and business laws regarding record keeping and transaction documentation.
- Legitimate interest: For operational purposes such as improving customer service, internal administration, or limited direct communications (unless you opt-out).
- Consent: Where required for marketing purposes, and only if you have explicitly agreed to receive such communications.
Retention Periods
We will only retain your personal data for as long as is necessary for the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Typically, customer order records are retained for up to 7 years to meet our legal and business obligations. Personal data used exclusively for marketing, where consent is withdrawn or the data is no longer needed, will be securely erased or anonymised within a reasonable timeframe.
Data Processors and Third Parties
Blackwall Flowers may engage trusted external processors to help deliver our services, such as:
- Payment processing providers: To securely process online and in-person transactions.
- Delivery partners: For dispatching and delivering your flower order to the correct address.
- IT and system support providers: For managing our website, sales platform, and secure data storage.
All third-party processors are required by contract to process personal data in accordance with our instructions and in compliance with GDPR. Where applicable, we ensure that third parties protect your data to a standard at least equivalent to our own.
We do not sell, trade, or rent your personal data to third parties. Your data is not transferred outside the UK or EEA unless appropriate safeguards are in place.
Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: Request a copy of your personal data that we hold.
- Right to Rectification: Request correction of any inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data when there is no longer a legal ground for us to retain it.
- Right to Restrict Processing: Request the restriction of processing under certain circumstances.
- Right to Data Portability: Receive your provided personal data in a structured format or ask us to transfer it to another provider.
- Right to Object: Object to processing where we rely on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
If you wish to exercise any of these rights, please contact us using the details provided at the point of order or through our usual communication channels. You also have the right to lodge a complaint with the relevant data protection authority.
How We Protect Your Data
Blackwall Flowers uses appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, theft, alteration, or disclosure. These include secure order processing systems, limited internal data access, data encryption when applicable, and regular staff training on data protection.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our processing practices or regulatory requirements. Any updated version will apply as soon as it is published or made available to customers placing orders in Blackwall and surrounding districts.
Contact and Further Information
If you have any questions or concerns regarding this Privacy Policy or our processing of your personal data, please reach out through the contact methods available at the time of your order. We take privacy seriously and will do our utmost to address your enquiry in a timely and transparent manner.
