Anerley Flowers Privacy Policy

Privacy Policy for Anerley Flowers Customers

At Anerley Flowers, we are committed to protecting your privacy and handling your personal data with the utmost care. This Privacy Policy explains how we collect, use, store, and protect the information you provide to us when ordering flowers from Anerley and the surrounding districts. Our practices comply with the UK General Data Protection Regulation (GDPR). Please read this policy carefully to understand your rights and our responsibilities.

Scope of This Policy

This Privacy Policy applies to all customers who place flower orders with Anerley Flowers, whether online, over the phone, or in person, from Anerley and its surrounding areas. By placing an order with us, you acknowledge and accept the data practices described in this document.

What Personal Data We Collect

We collect and process the following categories of personal data in connection with your order:

• Identification Data: Name, address, and contact details (such as telephone number).
• Order Details: Information about your purchase, such as delivery address, recipient name, messages to be included, and product preferences.
• Payment Information: Payment card details or alternative payment method details (processed securely via payment processors).
• Communication Data: Records of correspondence with you, including order confirmations and responses to your enquiries.
• Technical Data: IP address, browser type, and device information if you order using our website.

Lawful Bases for Processing Your Data

Under the GDPR, we are required to have a lawful basis for processing personal information. Anerley Flowers processes your personal data under the following lawful bases:

• Contractual Necessity: We process your data to fulfill our contract with you—specifically, to process, deliver, and confirm your flower orders.
• Legal Obligations: We may process personal data to comply with applicable laws and regulations (such as tax and accounting requirements).
• Legitimate Interests: We may process your data to improve our services, ensure the security of our operations, or to send limited communications related to your order.
• Consent: We will seek your explicit consent if we wish to use your data for marketing or unrelated purposes. You may withdraw your consent at any time.

How We Use Your Data

Anerley Flowers uses your personal data:
- To process and fulfill your flower orders
- To communicate order details and status
- To arrange secure payment processing
- To improve our customer experience and services
- To comply with legal obligations

Data Retention

We retain customer personal data only as long as necessary for the purposes for which it is processed, in accordance with our data retention policy and legal requirements. Typically, customer order information is retained for up to seven years for accounting and record-keeping purposes. Communications and correspondence will be held in accordance with operational needs and deleted once no longer required. When the retention period expires, data is securely deleted or anonymised.

Data Processors and Data Sharing

Anerley Flowers engages a limited number of trusted third-party service providers (data processors) who may process your data on our behalf. These include:

• Payment processors for secure payment handling
• IT service and hosting providers to operate our website and systems
• Delivery partners for order fulfilment
• Professional advisors (such as auditors or accountants) only where necessary

We require all processors to keep your information secure and process it only as instructed by us, in compliance with the GDPR. We do not sell or share your personal data with third parties for marketing purposes.

Your Data Rights

Under the GDPR, you have the following rights regarding your personal data held and processed by Anerley Flowers:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of any inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your data in certain circumstances.
• Right to Restrict Processing: You can ask us to limit how your data is processed.
• Right to Data Portability: You may request a copy of your data in a digital format, where technically feasible.
• Right to Object: You can object to certain types of processing, such as direct marketing (which we only undertake with consent).
• Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw this at any time.

You may exercise any of these rights by contacting us with your request. We will respond as required by applicable data protection law.

How We Keep Your Data Secure

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include encryption, secure storage, restricted physical and digital access, and staff training. Our website uses secure protocols for online data collection, and we regularly review our security practices.

International Data Transfers

All personal data is stored and processed within the United Kingdom or European Economic Area (EEA). Should we ever need to transfer your data outside these regions, it will be done according to the requirements of the GDPR, ensuring your data remains protected via approved legal mechanisms.

Complaints and Further Information

If you have further questions or wish to make a complaint about our handling of your personal data, please contact us using your chosen method. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection authority, if you believe that Anerley Flowers has not complied with your data protection rights.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or for operational reasons. Any significant changes will be communicated through our usual channels. Please review this policy periodically to stay informed about how we use and protect your information.