Flowers Elephant and Castle Privacy Policy

Introduction

This Privacy Policy explains how Flowers Elephant and Castle collects, uses, stores, and safeguards your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers purchasing products and services from Flowers Elephant and Castle when placing orders in Elephant and Castle and the surrounding districts. We are committed to ensuring your privacy is protected and to being transparent about our data handling practices.

What Data We Collect

Flowers Elephant and Castle collects the following categories of personal data to provide our products and services:

• Identity Data: Name, title
• Contact Data: Delivery address, billing address, postcode, telephone number, and any other contact information provided during the order process
• Order Data: Details of products or services ordered, order history, payment status, and special delivery instructions
• Payment Data: Payment method and partial payment card information (note: we do not store full credit/debit card details)
• Correspondence: Any correspondence or communications with Flowers Elephant and Castle, such as requests, feedback, complaints, or queries related to your order
• Technical Data: IP address, browser type and version, device information, time zone setting, and cookies relevant to order processing and website security

We do not collect special categories of personal data (such as health or biometric data), unless specifically provided by you when necessary to fulfil your order (for example, allergy information for flower arrangements).

Lawful Basis for Processing

In compliance with GDPR, Flowers Elephant and Castle only processes your personal data where there is a valid lawful basis. Our processing is based on one or more of the following grounds:

• Contractual Necessity: To process, confirm, and fulfil your order and to provide delivery or related services, as this is necessary for the performance of a contract between you and Flowers Elephant and Castle.
• Legal Obligations: To comply with tax, accounting, and regulatory requirements.
• Legitimate Interests: For customer service, improving our products and services, and maintaining the security of our website and business operations. We balance these interests against your rights and freedoms.
• Consent: If required, for example, to send you marketing communications about special offers or promotions, we will obtain and record your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your data may be used for the following purposes:

• Processing and delivering your orders efficiently
• Communicating with you about your order status, changes, or deliveries
• Responding to your customer service requests, enquiries, and feedback
• Maintaining accurate records for accounting, tax, and business analysis
• Improving our services and developing new offerings to meet customer needs
• Preventing fraud or misuse of our services
• If you provide consent, sending you marketing communications about products, discounts, or seasonal promotions relevant to Flowers Elephant and Castle

Data Retention

Flowers Elephant and Castle retains your personal data only as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Our standard retention periods are as follows:

• Order and transaction data: retained for up to seven years to comply with tax and financial regulations
• Correspondence and customer service records: retained for up to three years from the date of your last interaction
• Marketing consent and preferences: retained until you withdraw your consent or request deletion
• Technical and usage data: retained according to our cookie policy and only for the period necessary for security and analytics purposes

After these periods, personal data is securely deleted or anonymised.

Data Sharing and Processors

Your personal data may be shared with selected third-party processors providing essential services to Flowers Elephant and Castle. These processors are contractually obligated to handle your data in compliance with GDPR and only process data on our instructions. Typical data processors include:

• Payment processors (for secure handling of transactions)
• Delivery partners (to ensure your order delivery)
• IT service providers and website hosts (for data security and technical support)
• Accountants, legal, or regulatory advisers (for compliance purposes)

We do not sell, rent, or trade your personal data with third parties for marketing purposes. Where data is transferred outside the UK or European Economic Area, we ensure such transfers are protected by appropriate safeguards.

Your Rights Under GDPR

Under GDPR, as a customer placing orders with Flowers Elephant and Castle from Elephant and Castle and the surrounding districts, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data where it is no longer required or where you have withdrawn consent.
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request we provide your data in a structured, commonly used format for transfer to another provider.
• Right to Object: You may object to processing of your data where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw consent at any time.

Exercising Your Rights

If you wish to exercise any of these rights, or have questions about our data practices, please contact us in writing detailing your request. We may need to verify your identity before we respond and will process your request in accordance with applicable laws. Please note that certain data may be retained where required by law or legitimate business purposes.

Policy Updates

Flowers Elephant and Castle may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. If significant changes are made, we will provide a prominent notice to our customers. We encourage you to review this policy periodically to remain informed about how we protect your data.

Summary

Flowers Elephant and Castle is committed to handling your personal data responsibly, transparently, and in compliance with GDPR requirements. This policy ensures that your data is protected throughout your customer journey from ordering to delivery in Elephant and Castle and nearby areas.