Privacy Policy for Orders at Pimlico Flowers
Introduction
At Pimlico Flowers, we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you place an order with Pimlico Flowers, whether you are located in Pimlico or surrounding districts. We handle your data in compliance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers making purchases directly from Pimlico Flowers within these areas.
What Personal Data We Collect
When you place an order with Pimlico Flowers, we collect and process different categories of personal data as necessary to fulfil your order and provide our services. This includes:
- Contact Information: Such as your name, delivery address, recipient’s name and address (if different), and your contact details.
- Order Details: Information about the products and services you purchase, special requests, messages for recipients, and payment confirmation.
- Payment Information: While payments may be processed by third-party providers, we receive confirmation of payment, and in some cases, limited billing information.
- Communication Records: Copies of correspondence with us (for example, via our website or over the phone), inclusive of your feedback and inquiries.
- Technical Data: We may collect information about the device and browser you use to access our website (such as IP address, browser type, and cookies), to ensure website security and functionality.
Our Lawful Basis for Processing Your Data
Pimlico Flowers processes your personal information lawfully, fairly, and transparently. We rely on the following legal bases as defined by the GDPR:
- Performance of a Contract: Most of the data we collect is necessary to fulfil your order and supply products and services you request.
- Legal Obligations: Certain financial or transactional data must be kept according to tax, accounting, or other legal requirements.
- Legitimate Interests: We may use your data to improve our services, prevent fraud, and ensure network safety, provided these interests are not overridden by your rights and interests.
- Consent: For direct marketing and promotions, we will only contact you if you have provided explicit consent, which may be withdrawn at any time.
How We Use Your Personal Data
Pimlico Flowers uses the personal data collected for several purposes:
- Processing, confirming, and delivering your flower orders as requested.
- Contacting you with updates about your order’s status.
- Managing customer service queries, complaints, or feedback.
- Administering our accounts and records for accounting and business analysis purposes.
- Complying with any applicable legal or regulatory obligations.
- With your consent, sending information about offers and news related to Pimlico Flowers.
How We Store and Retain Your Data
We take all reasonable steps to ensure your data is protected and only accessed by authorised personnel or processors for legitimate purposes. We retain your personal data only as long as is necessary to fulfil the purposes it was collected for, including satisfying legal, accounting, or reporting requirements.
For example:
- Order and transaction details are generally held for up to seven years to comply with legal obligations and resolve possible disputes.
- Contact information used for marketing is retained until you withdraw your consent or opt-out.
- Technical and browsing information is retained for up to two years for analytical, security, and troubleshooting purposes.
Sharing Your Data with Processors and Third Parties
Pimlico Flowers will never sell your personal data. However, we may share your information with trusted third-party service providers (processors) who help us operate our business, for the purposes stated in this policy. These may include:
- Payment processors (to process transactions securely).
- Delivery partners (to ensure the correct and timely delivery of your flowers).
- IT and system administration providers (for website and database hosting and management).
- Professional advisers (such as accountants or legal consultants, where required).
- Regulatory or law enforcement agencies, where required by law.
All processors are contractually obliged to keep your data secure, use it only as instructed by Pimlico Flowers, and act in accordance with applicable laws.
Your Rights as a Data Subject
Under the GDPR, you have a number of important rights regarding your personal data, including:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You may ask us to correct or update inaccurate or incomplete information.
- Right to Erasure: In certain circumstances, you can request the deletion of your personal data from our systems.
- Right to Restrict Processing: You can ask us to restrict how your data is used in specific scenarios.
- Right to Data Portability: You may request to receive your data in a structured, commonly used format, and have the right to transmit that data to another organisation.
- Right to Object: You may object to certain uses of your data, such as direct marketing, at any time.
- Right to Withdraw Consent: Where our processing relies on your consent, you may withdraw this at any time without affecting the lawfulness of processing before withdrawal.
If you wish to exercise any of these rights, please contact us using the methods set out on our website or in your order confirmation documents. We may need to request specific information to help us confirm your identity before responding to your request.
Policy Updates
Pimlico Flowers may update this Privacy Policy at any time. Any significant changes will be clearly indicated on our website. It is recommended to review this policy regularly to stay informed about how we protect your personal information.
Contact and Complaints
If you have any questions, concerns, or requests regarding your data or this policy, please contact us via the contact details provided in your order confirmation or visit our website for further information. Should you remain dissatisfied, you have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO).