Your Privacy and Data Protection at Barbican Flowers

Barbican Flowers Privacy Policy

Introduction

This Privacy Policy explains how Barbican Flowers collects, uses, stores, and protects your personal information. It applies to all customers placing orders for flowers or related products and services from Barbican and surrounding districts. We are dedicated to ensuring that your privacy is respected and complying with the requirements of the General Data Protection Regulation (GDPR).

What Data We Collect

When you order from Barbican Flowers, we may collect the following types of personal data:

Identity Information: Your full name, and where needed, the name of the recipient.
Contact Information: Address, delivery address, and postcode; where necessary, any alternative delivery instructions.
Order Information: Details regarding your flower order, including selected products, card messages, and delivery preferences.
Transaction Data: The date, time, value, and method of your payment, though we do not retain full payment card numbers. Our payment service provider processes your payment directly on a secure platform.
Communication Data: Any correspondence or communication with us regarding your order, requests, feedback, or queries.
Technical Data: Device and usage information, such as browser type, device type, approximate location (at a city or district level only), and IP address, collected through cookies and similar technologies when you use our website.

Lawful Basis for Processing Your Data

The lawful basis under the GDPR for collecting and processing your personal data depends on the nature of your interaction with Barbican Flowers. We rely on the following lawful bases:

Performance of a Contract: Most of the data we collect is necessary to process and deliver your order, fulfill our contractual obligations, and handle customer service inquiries.
Legitimate Interests: We process data for purposes such as improving our services, conducting analytics, and ensuring the security of our website, provided these interests are not overridden by your rights and freedoms.
Legal Obligations: In some circumstances, we are required to process or retain data to comply with tax, accounting, or other regulatory requirements.
Consent: For certain activities, such as sending you marketing communications, we rely on your specific consent, which you can withdraw at any time.

How We Use Your Data

We use your personal data for the following purposes:

To process and fulfill orders placed by you for products and services from Barbican Flowers.
To contact you about your order, including confirmation, updates, any issues relating to delivery, or to respond to your queries and requests.
To manage payments and prevent fraudulent transactions.
To improve our website and shopping experience through analytics and troubleshooting.
To comply with legal and regulatory obligations.
To send marketing communications (where we have your express consent).

Data Retention

Barbican Flowers retains your personal information for only as long as is necessary for the purposes described in this Privacy Policy. In general:

Order-related data is kept for up to seven years to comply with tax and accounting requirements.
Communication records (such as emails or order queries) are kept for up to two years from your last interaction.
Technical data collected via cookies is retained in accordance with our cookie policy, typically no longer than two years.
When data is no longer necessary, we securely delete or anonymise it.

Our Data Processors

We may use trusted external providers ("Processors") to assist in delivering our products and services. These processors may include:

Payment Services Providers: To process your card payments securely.
Website Hosting Providers: To host and operate our online ordering platform.
Delivery Partners: For delivering your orders within Barbican and surrounding districts.
Analytics Providers: To help us analyse website usage and improve our service.

Each processor acts solely on our instructions, processes only the minimum necessary data, and implements security measures consistent with GDPR requirements. We do not sell or rent your personal data to third parties.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have a series of important rights in relation to your personal data. These include:

Right of Access: You can request a copy of the personal data we hold about you.
Right of Rectification: You have the right to ask us to correct inaccurate or incomplete data.
Right to Erasure: You may ask us to delete your personal information if it is no longer necessary for the purposes we collected it for, or you withdraw your consent (where applicable).
Right to Restriction: You are entitled to ask us to restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You can ask us to provide your data to you or to a third party in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to certain types of processing, such as direct marketing.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time.

To exercise these rights, you may contact us using the contact details provided on our website or in your order documentation. We will respond to your requests in accordance with GDPR requirements and within statutory timelines.

Data Security

We are committed to maintaining appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, theft, or misuse. This includes secure website protocols, access controls, and staff training on data protection principles. While we strive to protect your personal data, please be aware that no security measures can be guaranteed absolute.

Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our data processing practices, services, or legal requirements. We encourage customers to review the policy from time to time. Any significant changes will be notified to you using appropriate means, such as via update notices on our website.

Contact and Scope

This Privacy Policy applies to all customers who place orders with Barbican Flowers for delivery in Barbican and its surrounding districts. If you have questions or concerns about how we process your personal information, or if you wish to exercise any of your rights, you can reach out to us via the contact information listed on our website’s contact page or in your purchase confirmation documentation. We are committed to upholding your rights and ensuring your data is processed responsibly and transparently.