Flowers Pimlico Privacy Policy Overview

Introduction

This Privacy Policy outlines how Flowers Pimlico collects, uses, stores, and protects your personal information when you place an order with us. This policy applies to all customers ordering from Flowers Pimlico in Pimlico and surrounding districts. In line with the General Data Protection Regulation (GDPR), we are committed to ensuring your data remains secure and your privacy is respected at all stages of your interaction with our services.

What Personal Data We Collect

When you place an order or interact with Flowers Pimlico, we may collect and process the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and phone number.
• Order Details: Products or floral arrangements ordered, personal messages, and delivery instructions.
• Payment Information: Limited payment details—such as payment confirmation or transaction ID. Full payment details are processed securely by our external payment processors and are not stored by us.
• Communication Data: Records of your communications with us (e.g., order confirmations, service queries, and feedback).
• Technical Data: IP address, device type, browser type, and other technical details collected through our website’s cookies and analytics tools. This may include traffic data and location information limited to the area relevant to your order.

Lawful Basis for Processing Personal Data

Flowers Pimlico processes personal data only when there is a valid legal ground under GDPR. Our lawful bases include:

• Performance of a Contract: Data is processed to fulfill your order, deliver products, and provide customer support.
• Legitimate Interests: For certain marketing, analytics, and business improvement activities—where these do not override your privacy rights.
• Legal Obligation: Where necessary, to comply with applicable laws and regulatory requirements.
• Consent: If we collect and use data for optional services (such as marketing communications), we will request your explicit consent, which you are free to withdraw at any time.

Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Our standard retention periods are as follows:

• Order records and transaction information: retained for up to 7 years in line with tax and accounting regulations.
• Contact and communication data: retained for up to 2 years after your last interaction with us, unless you request deletion sooner.
• Marketing preferences: retained until you withdraw your consent or update your preferences.
• Technical data: retained for up to 12 months for analytics and security purposes.

Once the retention period expires, your data is securely deleted or anonymised unless its continued retention is required by law.

Processors and Data Sharing

We only share your personal data with third parties where necessary to provide our services, fulfill your order, or comply with legal requirements. Our engagement with external organisations includes:

• Payment Processors: Trusted payment service providers who securely process payment transactions on our behalf. Flowers Pimlico does not store or have access to your full payment card information.
• Delivery Partners: Florists and delivery services responsible for fulfilling and delivering your order in Pimlico and surrounding districts.
• IT and System Providers: Companies providing website hosting, maintenance, analytics, and customer management systems.
• Legal and Regulatory Authorities: When required by law, we may disclose your data to public authorities and law enforcement agencies.

All processors are vetted to ensure they handle your data in accordance with the GDPR and take appropriate technical and organisational measures to protect your information.

Your Rights as a Data Subject

Under the GDPR, you have a range of rights concerning your personal data. Flowers Pimlico is committed to upholding these rights, which include:

• Right of Access: You can request details or a copy of the personal data we hold about you.
• Right to Rectification: If any information is incomplete or inaccurate, you may ask us to correct it.
• Right to Erasure: You may request deletion of your personal data where there is no good reason for us to continue processing it.
• Right to Restriction: You may ask us to temporarily restrict the processing of certain data under specific circumstances.
• Right to Data Portability: You can request that your data be transferred to another organisation in a structured, commonly used format.
• Right to Object: You can object to processing, particularly for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the legality of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to complain to your national data protection authority if you believe your data has been processed in a way that does not comply with the law.

Security Measures

Your personal data is stored securely using industry-standard safeguards designed to prevent unauthorised access, disclosure, alteration, or destruction of your information. Access to data is restricted to authorised employees, agents, and contractors who require it for legitimate business operations. We regularly review and update our security practices to include the latest technology and regulatory developments.

Applicability and Changes to This Policy

This Privacy Policy applies to all individuals placing orders with Flowers Pimlico in Pimlico and the surrounding districts. We may update this policy to reflect changes in our practices, legal obligations, or for other operational reasons. Significant updates will be highlighted on our website, and your continued use of our services following any changes constitutes acceptance of those updates.

Contacting Flowers Pimlico

If you have any questions about this Privacy Policy, require further clarification about how your personal data is used, or wish to exercise your data protection rights, please reach out using our designated contact form available on our website or contact our customer service team through the methods outlined on our contact page. We are committed to responding promptly and addressing your privacy-related queries in accordance with applicable laws.