Paddington Flowers Privacy Policy Statement

Introduction

At Paddington Flowers, we are committed to protecting your personal data and ensuring transparency regarding how your information is collected and managed. This Privacy Policy outlines how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Paddington Flowers, whether you are located in Paddington or the surrounding districts.

What Personal Data We Collect

To fulfil your orders and provide the best possible service, we collect the following types of personal data:

• Contact Information: Including names, billing and delivery addresses, and phone numbers, which are necessary for order processing and delivery.
• Order Details: Information about the products you purchase, notes for recipients, and transaction histories.
• Payment Data: Payment card details (which are securely processed by authorised payment providers and not retained by Paddington Flowers), payment confirmation, and relevant transaction references.
• Account Data: If you choose to create an online account with Paddington Flowers, we store login details such as username and password (passwords are encrypted), order history, and preferences.
• Correspondence: Any communications you have with us regarding orders, customer service queries, feedback, or complaints.
• Cookies and Analytics: When you visit our website, we may collect information about your device, browser, and browsing patterns using cookies or similar technologies strictly necessary for website functionality and improvement. We do not use cookies for profiling or marketing without your explicit consent.

Lawful Basis for Processing Personal Data

Paddington Flowers processes personal data based on one or more lawful bases as defined under GDPR:

• Contractual Necessity: Most data collection is required to fulfil the contract of sale and delivery of products requested by you.
• Legal Obligation: Some information is kept to comply with tax, accounting, and statutory requirements.
• Legitimate Interests: We use your data to improve our products and services, maintain records, and prevent fraud, provided these interests do not override your rights and freedoms.
• Consent: Certain communications, such as marketing by email, will only be provided with your explicit consent. You may withdraw this consent at any time.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Generally:

• Order and delivery records are retained for up to seven years, in line with accounting regulations.
• User account data is kept for as long as your account remains active, or until you request deletion.
• Communications and customer service records are kept for up to three years after resolution of an enquiry or complaint.
• Data obtained through cookies may be retained for shorter periods, as governed by our website functionality needs and your consent preferences.

Once data is no longer needed, it will be deleted or anonymised in a secure manner.

Data Processors and Third Parties

Paddington Flowers uses selected third-party service providers (data processors) to assist in delivering products and services to you. These may include:

• Payment Processors: Secure third parties process your payment information for order fulfilment.
• Delivery Providers: We share necessary details with our delivery partners to ensure successful handover of your flowers and gifts.
• IT and System Providers: Platform and hosting companies who help maintain security and functionality of our website and systems.
• Analytics Services: Providers who enable us to measure website usage and improve user experience, processing only aggregated or anonymised data where possible.

All third-party processors are contractually bound to handle your data only to the extent necessary for performing their services and to comply with GDPR standards. We do not sell or share your data for commercial purposes with unauthorised third parties.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data collected by Paddington Flowers:

• Right of Access: You may request confirmation that we process your data and obtain a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct any inaccuracies in your data or complete information you believe is incomplete.
• Right to Erasure: Also known as the right to be forgotten, you may request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit the way your data is processed, for example if you contest its accuracy or object to its processing.
• Right to Data Portability: You can request a digital copy of your personal data that you have provided to us, where processing is based on consent or contract.
• Right to Object: You can object to the processing of your personal data for direct marketing purposes or where the processing is based on legitimate interests.
• Right Not to be Subject to Automated Decisions: Paddington Flowers does not make decisions based solely on automated processing that produce legal effects concerning you.

You can exercise these rights by contacting us via the methods provided on our website or at our business premises. We may ask for proof of identity before fulfilling your request, to ensure your data is protected.

How We Keep Your Data Safe

We take your data security seriously. Paddington Flowers utilizes appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, and destruction. This includes encryption of sensitive data, secure backup procedures, and access restrictions for staff and processors.

Policy Updates and Your Responsibilities

We may periodically review and update this Privacy Policy to ensure continued compliance with GDPR and other applicable laws. Any updates will take effect as soon as they are published on our website. We recommend reviewing this policy each time you place an order with us or use our services so you remain informed about how your data is used.

If you have questions or concerns about this privacy policy or how we handle your personal data, please contact us at our Paddington Flowers business premises or through the contact form on our website.

Applicability of this Privacy Policy

This Privacy Policy applies to all customers of Paddington Flowers, covering all orders and interactions originating in Paddington and the neighbouring districts. By placing an order with us, you acknowledge that you have read and understood this policy and consent to the practices described herein, subject to your rights under GDPR.

Thank you for trusting Paddington Flowers with your personal data. We are dedicated to safeguarding your information and upholding your privacy at all times.