Privacy Policy for Shepherd's Bush Flowers

Introduction

This Privacy Policy explains how Shepherd's Bush Flowers collects, uses, retains, and protects your personal information in accordance with the UK General Data Protection Regulation (GDPR). It applies to all customers who place orders with Shepherd's Bush Flowers from Shepherd's Bush and neighbouring districts. We value your trust and are committed to respecting your privacy and safeguarding your personal data.

What Data We Collect

When you place an order or interact with Shepherd's Bush Flowers, we may collect the following categories of personal data:

  • Contact Information: Name, address (for delivery and billing), and delivery instructions.
  • Contact Details: Phone number and any other information provided for order fulfillment or correspondence.
  • Order Data: Details of products ordered, purchase history, cardholder name (we do not store full payment card details), and any special messages included with your order.
  • Communication Records: Correspondence between you and Shepherd's Bush Flowers, queries, feedback, or complaints related to your order.
  • Technical Data: Website usage information such as IP address, browser type, and device identifiers when you visit our website for placing orders online. This helps us improve your online experience but does not directly identify you.

Lawful Basis for Processing

We process your personal data on the following lawful bases:

  • Contractual Necessity: To process, deliver, and communicate about your order, we need certain personal data to fulfill our contract with you.
  • Legal Obligation: Some information may be processed to meet legal duties such as accounting, fraud prevention, or other legal requirements.
  • Legitimate Interests: We may use your data to improve our services or resolve queries, provided this does not override your rights and freedoms.
  • Consent: If required by law (for example, for marketing communications), we will seek your explicit consent.

Data Retention

We will not retain your personal data longer than is necessary for the purposes outlined in this Privacy Policy. Typically, order information and associated personal data are retained for a period of up to seven years, to fulfil legal, tax, and accounting requirements. In cases of correspondence, we will retain relevant records for as long as necessary to address complaints or disputes, or as required by regulatory authorities. Once your data is no longer needed, it will be disposed of securely.

Data Processors and Third Parties

Shepherd's Bush Flowers works with trusted third-party service providers (“data processors”) who assist us in delivering our services. These may include payment processors, couriers, IT support providers, website hosting services, and bookkeeping or accounting services.

All processors are required to act only on our instructions and comply fully with applicable data protection regulations. They must implement technical and organisational measures to ensure the security of your data. We do not sell or share your information for marketing purposes with any external entities.

If our business is sold or diversified, your data may be transferred to a new owner, but will remain subject to the commitments outlined here.

Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to have inaccurate or incomplete data corrected.
  • Right to Erasure: You may request deletion of your personal data when it is no longer required, or if we have no lawful grounds to continue processing.
  • Right to Restrict Processing: You can request us to suspend processing of your data in specific circumstances.
  • Right to Data Portability: You can ask for your data to be provided to you or a third party in a commonly used, machine-readable format in some situations.
  • Right to Object: You may object to processing where we rely on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise these rights, you may contact us using the details provided on our website or written correspondence address.

How We Protect Your Data

We are committed to ensuring the security of your personal data. Appropriate measures are in place to safeguard information from accidental loss, theft, unauthorised access, disclosure, alteration, or destruction. Only authorised staff and partners with a need to access your data—for contract fulfillment or regulatory reasons—are granted permission. Our relationships with data processors are governed by contracts obliging them to uphold strict confidentiality and data protection standards.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or in response to feedback. We encourage you to review it regularly when placing orders with Shepherd's Bush Flowers so you remain informed about how we protect your personal data.

Contacting Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out using the contact details available on our official website or by written correspondence to our registered business address. We are dedicated to addressing your concerns regarding data privacy and strive to resolve any issues in accordance with data protection regulations.