Alperton Flowers GDPR Privacy Policy

Introduction

At Alperton Flowers, we are committed to safeguarding the privacy and personal data of our customers. This privacy policy explains how we collect, use, store, and protect your personal information when you purchase flowers and related products from us. This policy is designed to comply with the General Data Protection Regulation (GDPR) and applies to all customers placing orders with Alperton Flowers in Alperton and surrounding districts.

What Data We Collect

We collect and process only the personal data that is necessary to fulfil your orders, provide customer service, and improve your experience with Alperton Flowers. The data we may collect includes:

  • Identity Data: Your name, title, and, if applicable, the recipient’s name.
  • Contact Data: Mailing address, delivery address, and billing address.
  • Contact Details: Telephone number and, if provided, email address.
  • Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
  • Order Details: Product preferences, personalized messages, date and time of order, and delivery instructions.
  • Technical Data: IP address, browser type and version, time zone setting and location (for online orders), and device type used to access our services.
  • Correspondence: Records of your interactions with our customer service, including queries, feedback, or complaints.

Lawful Basis for Processing Your Data

In accordance with GDPR requirements, we will only process your personal data where there is a lawful basis to do so. The following lawful bases apply to our processing activities:

  • Contractual Necessity: We process your data to fulfil our obligations to you, such as processing and delivering your order.
  • Legal Obligation: Certain data must be processed to comply with financial, tax, and consumer law requirements.
  • Legitimate Interests: We may process your data for our legitimate interests, such as improving our services, marketing related products, preventing fraud, and ensuring the security of our operations—provided your interests and fundamental rights do not override those interests.
  • Consent: We may request your explicit consent for specific uses of your data, such as receiving marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Alperton Flowers will use your personal data for the following purposes:

  • Processing and fulfilling your flower orders, including delivery and payment handling.
  • Communicating with you about your order, including updates or queries.
  • Responding to your customer service requests and resolving complaints.
  • Improving our products, processes, and the customer experience.
  • Complying with legal and regulatory requirements.
  • Sending you information about our products and services, only if you have given consent to receive such communications.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including satisfying legal, accounting, or reporting requirements. The criteria used to determine retention periods include:

  • The duration of your customer relationship with us.
  • The period necessary to process and deliver your order(s).
  • Legal obligations related to retention of financial records (for example, invoices or receipts).
  • Limitation periods for legal claims related to services provided.

Typically, order and transaction details are retained for up to seven years in order to comply with tax and legal requirements. After the applicable retention period, your personal data will be securely deleted or anonymized.

Processors and Third Parties

We may share your personal data with certain trusted third parties (processors) to help us deliver our services. These include, but are not limited to:

  • Payment service providers handling secure card and payment transactions.
  • Delivery companies or couriers involved in fulfilling your order.
  • IT and system administration service providers who support our operational infrastructure.
  • External professional advisers such as accountants, auditors, and insurers.

All third-party processors are required to adhere to data protection regulations and may only use your data as outlined in our contracts with them. Your data is not transferred outside the United Kingdom or European Economic Area unless appropriate safeguards are in place.

Your Rights Under GDPR

As a customer of Alperton Flowers, you have the following rights regarding your personal data:

  • Right of Access: Obtain a copy of your personal data held by us.
  • Right to Rectification: Request correction of any inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no legal reason for us to keep it.
  • Right to Restrict Processing: Ask us to suspend processing of your data in certain circumstances.
  • Right to Data Portability: Request transfer of your personal data to a third party in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to our processing of your personal data where we rely on a legitimate interest or direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time if we rely on consent to process your personal data.

To exercise these rights, you may contact us in writing at our business premises or using our official website contact form. We may need to verify your identity before processing your request. Most requests are handled free of charge, but we may charge a reasonable fee if a request is manifestly unfounded, repetitive, or excessive.

Security of Your Data

Alperton Flowers takes the security of your personal data seriously. We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. These measures are regularly reviewed and updated in line with legal requirements and industry best practice.

Changes to This Privacy Policy

We reserve the right to update or amend this privacy policy at any time. Updates will be communicated clearly on our official website and, where appropriate, notified to you. We encourage you to review this policy periodically to stay informed of how we protect your information.

Contact and Further Information

If you have any questions regarding this privacy policy, how we handle your data, or if you wish to make a complaint, you may contact us using the details provided on our website or by visiting our premises in Alperton. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with data protection laws, but we encourage you to contact us first so that we can address your concerns directly.