How East Sheen Flowers Protects Your Personal Data

East Sheen Flowers Privacy Policy

Our Commitment to Your Privacy

At East Sheen Flowers, we are dedicated to respecting and protecting the privacy of all our customers. This Privacy Policy outlines how we collect, use, process, and retain your personal data. This policy is designed to comply with the General Data Protection Regulation (GDPR) and applies to all customers placing orders with East Sheen Flowers, whether residing in East Sheen or surrounding districts.

What Personal Data Do We Collect?

For the purpose of fulfilling your orders and maintaining a high quality of service, East Sheen Flowers collects and processes the following types of personal data:

Identity Data: such as your full name and, if needed, the names of gift recipients.
Contact Data: such as your address, delivery address, and any other address details required for delivery; plus your telephone number if provided.
Order Data: information about your order(s), including product selections, delivery preferences, and order notes.
Payment Data: partial payment information necessary for order processing, although full payment details such as credit card numbers are securely processed by third parties and not retained by East Sheen Flowers.
Technical Data: including IP addresses, device and browser information, and, where applicable, cookies required for the functionality of our website.
Communication Data: records of correspondence with our shop regarding your inquiries or orders.

Lawful Basis for Data Processing

East Sheen Flowers processes your personal data lawfully, fairly and transparently. The primary lawful bases under GDPR for processing your data are as follows:

Performance of a Contract: We must collect and process your personal information in order to perform our contract with you, specifically to fulfil orders and provide requested services.
Legal Obligations: We may need to process certain data to comply with obligations under UK law (e.g. accounting and tax regulations).
Legitimate Interests: We may process data for legitimate interests, such as improving customer service, ensuring the security of our services, or responding to inquiries.
Consent: In certain circumstances, additional personal data (such as for marketing communications) may be processed only with your explicit consent, which you may withdraw at any time.

How We Use Your Information

Your personal data may be used for the following purposes:

To process and deliver your orders, including communicating with you about order status.
To respond to your queries and provide customer support.
To maintain internal records and comply with legal regulations.
To ensure the security and functionality of our website and systems.
To personalise your experience on our website (where applicable).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, and to meet our legal and regulatory requirements. This typically means retaining order and contact data for up to six years to comply with accounting and tax record-keeping duties, unless a longer retention period is required or permitted by law. Data that is no longer required will be securely deleted or anonymised.

Our Data Processors

In order to provide our services, certain aspects of your personal data may be processed by trusted third-party service providers ("processors") strictly as necessary to deliver our products and services. These may include:

Payment gateway services that securely process your payment data.
IT and website hosting support providers.
Delivery and courier companies used for fulfilling orders.
Bookkeeping and accounting software providers to help with our legal obligations.

All processors are contractually required to act only on our instructions, treat your data confidentially, and implement appropriate data protection measures. We do not sell or share your data with any third parties for their own marketing or business purposes.

Your Data Protection Rights

Under GDPR and UK data protection laws, you have the following rights with respect to your personal data:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request corrections to inaccurate or incomplete data.
Right to Erasure: You can ask us to delete your personal data where there is no good reason for us to continue processing it (subject to our legal obligations).
Right to Restriction: You can request the restriction or suppression of your personal data in certain circumstances.
Right to Data Portability: You can request us to provide your data in a structured, commonly used format and to transfer it to another data controller.
Right to Object: You may object to the processing of your data for direct marketing or certain other purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw this at any time.

To exercise these rights, please contact us directly or speak to a member of staff at our shop. Verification of identity may be required for security reasons.

Data Security

We take the protection of your personal data seriously. Appropriate organisational and technical safeguards are in place to secure your data against unauthorised access, alteration or disclosure. Our staff are trained in data protection and only those with a business need to access your data are permitted to do so.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The most recent version will always be available in-store and online. We encourage you to review this policy periodically.

Contact Us

Your privacy matters to us. If you have any questions about this privacy policy or how we handle your personal data, please contact or visit us at the shop and we will be happy to assist you.