Watford Flowers Data Privacy Commitment

About This Privacy Policy

This Privacy Policy explains how Watford Flowers collects, uses, stores, and protects the personal data of all customers placing orders with us from Watford and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring your personal data is processed lawfully, fairly, and transparently. Please read this policy carefully to understand your rights and Watford Flowers' responsibilities concerning your information.

What Personal Data We Collect

When you place an order, make an inquiry, or interact with our services, we may collect and process the following categories of personal data:

• Identity Data: Your first name, last name, and, where applicable, the recipient’s name.
• Contact Details: Delivery address, billing address, postcode, and town/city.
• Communication Data: Information you provide in your communications with us, such as special instructions or messages accompanying your order.
• Order Details: Details of the products ordered, requested delivery date, and any preferences you provide.
• Transaction Data: Details necessary for processing your payment, such as payment confirmation (note that we do not store full payment card details, which are processed securely by our payment service providers).
• Technical Data: When you visit our website, we may collect information about your device and interaction, such as IP address, browser type, time zone, and cookies.

Lawful Basis for Data Processing

Under the GDPR, we rely on specific lawful bases to process your personal data:

• Contractual Necessity: Most information we process is necessary for fulfilling our contract with you, including processing and delivering your orders, managing payments, and providing customer service.
• Legal Obligations: Some data processing is performed to comply with legal and regulatory requirements, including financial record keeping and fraud prevention.
• Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, understanding purchasing trends, and protecting our business from fraud. Whenever we rely on legitimate interest, we ensure your interests and fundamental rights do not override these interests.
• Consent: Where required by law, for example for some types of marketing communications, we will only process your data with your explicit consent. You have the right to withdraw your consent at any time.

Use and Disclosure of Your Data

Your personal data is used solely for the purposes described in this policy. This includes processing your orders, arranging delivery, responding to enquiries, and maintaining our business records. We do not sell or rent your personal data to third parties.

Your data may be shared with trusted data processors who assist us in fulfilling our business functions:

• Payment Service Providers: To process payments securely.
• Delivery Partners: To fulfil and deliver your orders.
• IT and Web Service Providers: Who host and support our website or provide email, data storage, and analytics services.
• Professional Advisors: Such as accountants or auditors to comply with legal obligations.

Whenever we engage a third-party processor, we ensure there is a contract in place requiring your data to be processed in compliance with GDPR obligations and only for specified purposes.

International Transfers

Typically, your personal data is stored and processed within the United Kingdom or the European Economic Area (EEA). If it becomes necessary to transfer your data outside the UK or EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision to ensure your data remains protected to GDPR standards.

Data Retention

Watford Flowers retains your personal data only as long as necessary for the purposes for which it was collected, including fulfilling orders, complying with legal and accounting obligations, or resolving disputes.

• Order Information: Retained for up to 7 years for legal accounting and tax purposes.
• Marketing Data: If you have consented to receive marketing, we will retain your contact information until you withdraw your consent or unsubscribe.
• Technical and Analytical Data: Retained as per our cookie policy and subject to regular review.

At the end of retention periods, or if you request deletion (provided we have no overriding need or legal requirement to retain it), your personal data will be securely deleted or anonymised.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data where there is no longer a legal basis for retention.
• Right to Restrict Processing: Ask us to restrict processing under certain circumstances.
• Right to Object: Object to certain types of data processing, such as direct marketing.
• Right to Data Portability: Request transfer of your data to you or another service provider.
• Right to Withdraw Consent: Where consent is relied upon, you can withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your rights have been infringed.

If you wish to exercise any of your rights, please contact us. For security, we may need to verify your identity before responding to your request.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. This includes encrypted payment transactions, data access controls, staff training, and regular review of data handling procedures.

Children’s Data

Our services are not intended for use by children under the age of 16. We do not knowingly collect data from children without parental consent.

Policy Updates

We may update this Privacy Policy from time to time. Any updates will be posted on our website, and significant changes will be notified to users as appropriate. Please review this policy periodically to remain informed of how we protect your data.

Contact and Queries

If you have any questions, concerns, or requests regarding this Privacy Policy or about how Watford Flowers handles your personal data, please contact us using the contact details available on our website or in-store. We are always happy to help clarify how we protect your information and uphold your rights.