Flowers Castelnau Privacy Policy

Our Commitment to Your Privacy

At Flowers Castelnau, we are dedicated to maintaining your trust and confidence. This Privacy Policy outlines how we collect, use, and protect the personal data of customers who place flower orders with us in Castelnau and the surrounding districts. Transparency regarding your rights and the ways we handle your information is a fundamental value of our business.

Scope of This Privacy Policy

This policy applies to all individuals and customers placing orders with Flowers Castelnau, whether via our website, by phone, or in person, and covers all interactions in Castelnau and its surrounding districts. By placing an order, you acknowledge the collection and processing of your personal data as described herein.

What Personal Data We Collect

When you place an order with Flowers Castelnau, we collect and process the following categories of personal data:

• Identification and Contact Information: Includes your full name, address, phone number, and (if required) alternative contact information.
• Order Details: Details about the products ordered, delivery instructions, and recipient information if you are sending flowers to someone else.
• Payment Information: We process payment information necessary for transaction completion (such as credit/debit card details or alternative payment methods). These details may be handled by secure payment processors and are not stored by us longer than necessary.
• Communication Records: Any correspondence sent to or received from you, including messages, feedback, or complaints regarding our services.
• Website Usage Data: If you use our website, we may collect data such as your IP address, browser type, device information, and usage behaviour through cookies and tracking technologies.

Lawful Basis for Processing Your Data

We process your personal data in accordance with the General Data Protection Regulation (GDPR) based on the following lawful grounds:

• Contractual Necessity: Your information is required to process orders, deliver flowers, manage payments, and fulfil our contractual obligations to you.
• Legitimate Interests: We may use your information to improve our services, prevent fraud, and ensure network and information security, provided these interests do not override your fundamental rights.
• Legal Obligations: To comply with legal and regulatory obligations, such as maintaining transaction records for tax purposes.
• Consent: In cases where processing is not covered by the bases above (for example, for marketing communications), we will seek your explicit consent, which you may withdraw at any time.

Retention Periods

Your personal data will only be retained for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Generally:

• Customer and transaction details will be retained for up to seven years following your last order, in line with accountancy and legal requirements.
• Enquiry records and communication history are stored for up to two years unless you request earlier deletion.
• Website usage data is typically anonymised or deleted within 12 months.

Upon expiry of the relevant retention period, data will be securely deleted or anonymised.

Use of Data Processors

To carry out our operations, we may engage carefully selected third-party service providers (processors). These include:

• Payment Service Providers: For handling secure payments.
• Delivery Partners: Assisting in the efficient delivery of orders.
• IT Service Providers: Companies providing web hosting, customer records management, and email services.

Any processors we use are bound by strict data protection duties. We ensure appropriate contractual safeguards are in place, requiring all processors to act only upon our instructions and protect personal data accordingly. Data will never be sold to external organisations.

Your GDPR Data Rights

Under GDPR, you have several important rights regarding the personal data we hold about you. You may:

• Request access to copies of your personal data.
• Request rectification of inaccurate or incomplete information.
• Request erasure of your personal data under certain conditions.
• Request restriction or objection to the processing of your data in specific circumstances.
• Request transfer of your data to another organisation (data portability).
• Withdraw your consent for any processing activities to which you previously consented; this will not affect processing already carried out.

We are committed to fulfilling these rights and will respond to any such requests as required by law. When you make a request, we may require additional information to confirm your identity.

Security of Your Information

We take data security very seriously. Flowers Castelnau has implemented appropriate organisational and technical measures to prevent unauthorised access, loss, misuse, alteration, or disclosure of your information. These include secure servers, encryption, access controls, and employee training. Should a data breach occur, we will notify you and the authorities as required by law.

International Data Transfers

Your personal data is primarily processed within the United Kingdom. If it is ever transferred outside the European Economic Area, we ensure that an adequate level of protection is provided, consistent with GDPR requirements.

Changes to This Privacy Policy

This Privacy Policy is reviewed and updated from time to time to reflect changes in legal requirements or our business processes. The latest version will always apply to all data we hold about you, and we encourage you to review the policy periodically.

Contact and Concerns

If you have any concerns or wish to exercise your rights relating to your personal data as a customer placing orders with Flowers Castelnau in Castelnau or the surrounding districts, please contact us through the channels provided on our website. We are committed to addressing all queries and resolving any concerns promptly and transparently.