Creekmouth Flowers Privacy Policy for Customers

Introduction

This Privacy Policy outlines how Creekmouth Flowers collects, uses, stores, and protects your personal data when you place an order with us. Creekmouth Flowers is committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) and applicable data protection laws. This policy applies to all customers placing orders for delivery or collection within Creekmouth and surrounding districts.

What Data We Collect

When you place an order with Creekmouth Flowers, we may collect and process the following categories of personal data:

• Identity Data: Your full name and, if different, the recipient's name.
• Contact Data: Postal address, delivery address, telephone number(s).
• Order Data: Details about your order, such as floral selections, messages for greeting cards, and preferences regarding delivery times.
• Payment Data: Transaction details (please note that payment card data is handled solely by accredited payment processors; Creekmouth Flowers does not store full payment card details).
• Communication Data: Records of correspondence with you regarding your order or enquiry.
• Technical Data: Information about your device and browsing activity collected via cookies where applicable (see our Cookie Policy for further details).

Lawful Basis for Processing Your Data

We will only collect and use your personal data when we have a lawful basis to do so under GDPR. The main lawful grounds applicable to Creekmouth Flowers customers are:

• Performance of a Contract: Most of the information we collect is necessary for the fulfillment of your order, such as processing payment, preparing your bouquet, and arranging delivery or collection.
• Legal Obligation: We may process your personal data to comply with statutory obligations, such as tax reporting and accounting requirements.
• Legitimate Interests: We may use your information to improve our services, administer our site, or for fraud prevention, provided our interests do not override your rights and interests.
• Consent: Where you provide specific consent, for example, opting in to receive marketing communications, we will process your data accordingly. You may withdraw consent at any time.

How We Use Your Personal Data

We use your personal information for the following purposes:

• To process and fulfill your order, including delivery and collection arrangements
• To communicate with you regarding your order or any queries you raise
• To maintain accurate transaction and accounting records for business and legal compliance
• To monitor trends and improve our floral services for the benefit of all customers
• To send you marketing materials if you have opted in (you may opt out at any time)

Data Retention

We only retain your personal data for as long as is necessary to fulfill the purposes we collected it for, including the purposes of satisfying any legal, accounting, or reporting requirements. The retention period may vary depending on the nature of the data:

• Order Data: Retained for up to six years to comply with accounting obligations and in case of disputes.
• Contact and Communication Data: Retained for up to two years after your last order or enquiry unless you request deletion sooner, unless longer retention is required by law.
• Marketing Data: Retained only as long as your consent remains in force.

After the relevant retention period, your personal data is securely deleted or anonymized.

Processors and Third Parties

Certain elements of our service require us to share your information with trusted third-party processors. These include:

• Payment Processors: Secure payment service providers who handle your transaction details. Creekmouth Flowers never stores your full payment card details.
• IT and Software Providers: Companies providing order management, website hosting, and email services. These parties only process your information as instructed by us, under strict contractual obligations.
• Delivery Partners: For some orders, we may engage trusted local couriers to deliver your flowers.

Where it is necessary to share data with these processors, Creekmouth Flowers ensures that contracts are in place which require your personal data to be held securely and used only in accordance with our instructions and applicable data protection legislation. We do not sell or rent your data to any other parties.

Your Rights Under GDPR

As a Creekmouth Flowers customer, you have specific rights with respect to your personal data under the GDPR:

• Right of Access: You can request access to the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You can ask us to delete your personal data where there is no legitimate reason for us to retain it.
• Right to Restrict Processing: You have the right to restrict further processing where accuracy or legality is contested.
• Right to Data Portability: Where applicable, you can request your data be transferred to another service provider in a machine-readable format.
• Right to Object: You have the right to object to processing, especially where processed for legitimate interests or direct marketing.
• Right to Withdraw Consent: If we rely on your consent for any processing, you may withdraw it at any time.

To exercise any of these rights, you should contact us using the methods described in our customer communications or in the store. We will respond to all legitimate requests as required by law, typically within one month.

Security of Data

We commit to protecting your personal data. We implement appropriate organizational and technical safeguards to secure it against accidental loss, unauthorized disclosure, or access. This includes secure storage, access controls, and staff confidentiality agreements. While we take reasonable measures to secure your data, please note that transmission over the internet is never entirely secure. We therefore encourage you to take suitable precautions when communicating with us online.

Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in our practices or for legal reasons. The latest version will always be available in our store and via our website. If significant changes are made, we will notify you through appropriate channels.

Contacting Us

If you have any concerns about your data or wish to exercise your rights, please contact a member of staff in-store or use the methods described in your order confirmation. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been breached.

This Privacy Policy is effective as of June 2024 and applies to all Creekmouth Flowers customers placing orders from Creekmouth and the surrounding districts.