Hackney Marshes Flowers Privacy Policy

Name: CANDY CRUSH & TEDDY BEAR
Brand: Hackney Marshes Flowers
Price: 70.00 GBP
Availability: InStock

Introduction

At Hackney Marshes Flowers, we are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, retain, and protect your data in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Hackney Marshes Flowers from Hackney Marshes and surrounding districts.

What Data We Collect

When you place an order or interact with Hackney Marshes Flowers, we collect the following types of information:

Personal Identification Information: Name, address (delivery and billing), and phone number (where supplied).
Order Details: Information about the products you purchase, delivery instructions, and messages or notes you provide regarding the order.
Payment Information: Details necessary to process your payment, such as cardholder name, preferably through secure third-party processors. We do not retain your complete payment card data beyond the transaction, only confirmation of payment and relevant metadata.
Contact Information: If you contact us with a query or feedback, records of your communication may be kept.
Technical Information: Limited information collected via our website for order processing, including IP address, browser type, device details, and cookies if used.

Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your data. The primary bases for Hackney Marshes Flowers are:

Contract: Processing your data is necessary to fulfil your order and deliver our products and services.
Legal Obligation: Certain records, such as transaction history, must be retained for tax and accounting purposes.
Legitimate Interests: We may process your data for operational improvements, to prevent fraud, or to manage customer queries, provided your interests are not overridden.
Consent: Where required, such as where we process certain optional marketing communications (which you may opt into or out of separately).

How We Use Your Data

We use your personal information for the following purposes:

To process and deliver your flower orders efficiently and accurately.
To communicate with you regarding your order status, any queries, or to respond to your requests.
To manage payments, refunds, and to detect fraudulent activities.
For record-keeping, reporting, and compliance with legal obligations.
To improve our services and customer experience, based on operational data and feedback provided.

Data Retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typically, this means:

Order information is retained for up to seven years for accounting and compliance purposes.
Personal contact and order communications are retained for a maximum of two years after your last order or interaction, unless a longer retention is required by law.
Technical and website data (such as cookies, analytic logs) are retained in accordance with our internal website policies, generally not exceeding 13 months.

Processors and Data Sharing

We do not sell your personal information to third parties. However, to provide our services, we may share your data with carefully selected data processors. These include:

Payment Processors: Secure third-party payment providers process your payment information on our behalf.
Delivery Partners: Where necessary, your delivery information may be shared with local couriers or drivers to ensure your flowers reach their intended recipient.
IT and Data Storage Providers: Trusted companies that provide order management, email, or website hosting solutions.

All processors are required to process data only on our instructions, protect your data, and comply with the UK GDPR. We do not transfer personal data outside the UK or EEA unless adequate protection mechanisms are in place as required by law.

Your Rights Under GDPR

As a customer or data subject, you have certain rights regarding your personal data. These include:

Right to Access: You can request a copy of the personal information we hold about you.
Right to Rectification: You can ask for incorrect or incomplete data to be corrected.
Right to Erasure: In certain situations, you may request we delete your data ('the right to be forgotten').
Right to Restrict Processing: You can ask us to stop processing your information in some circumstances.
Right to Object: You can object to certain types of processing, such as direct marketing.
Right to Data Portability: Where processing is based on consent or contract, you may request your data in a common, machine-readable format.
Right to Withdraw Consent: Where we are processing your data based on your consent, you can withdraw it at any time.
Right to Complain: If you have concerns about how your data is handled, you can contact the UK Information Commissioner's Office (ICO).

How We Protect Your Data

We implement a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or loss. Data is stored securely by us and our processors, who are contractually obliged to meet GDPR standards. Access is limited to staff and suppliers with a business need, and all staff are trained in data privacy protocols.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When changes are made, we will update the policy date and, where appropriate, notify you in advance.

Contact and Further Information

If you have questions about this Privacy Policy or how we handle your personal data, please contact us directly. We are committed to protecting your privacy and upholding your rights as described in this policy.