Queen's Park Flowers Privacy Commitment

Introduction

This Privacy Policy explains how Queen's Park Flowers collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to everyone placing orders with Queen's Park Flowers from Queen's Park and the surrounding districts. Please read this policy carefully to understand your rights and how your information is treated.

What Data We Collect

To provide you with excellent floral arrangements and related services, Queen's Park Flowers collects the following categories of personal data:

  • Identity Data: Name (first and last), delivery recipient name if different from sender
  • Contact Data: Delivery address, billing address, telephone number, and (where provided) email address
  • Order Details: Order history, chosen products, delivery instructions, special requests
  • Payment Data: Payment method, transaction amount, confirmation of payment status (Note: We do not store actual card or bank details; these are securely processed by third-party payment processors)
  • Communication Data: Correspondence relating to your order, including queries and feedback

Lawful Basis for Processing

Under the GDPR, Queen's Park Flowers processes your personal data only when a lawful basis applies. For our customers, the main lawful bases are:

  • Contractual Necessity: We process personal data to fulfill the contract between you and Queen's Park Flowers, such as taking, preparing, and delivering your orders.
  • Legal Obligation: We may process data to comply with financial, tax, and other legal requirements.
  • Legitimate Interests: Occasionally, we may contact customers for feedback to improve our services or maintain records to protect our business against fraud or misuse.
  • Consent: For optional communications, such as marketing, we will only process your data if you have provided explicit consent. You may withdraw consent at any time.

How We Use Your Data

Your data is used strictly for:

  • Processing your orders (including communicating order status and resolving issues)
  • Arranging delivery of products to your selected recipients
  • Providing receipts and confirmation of purchases
  • Responding to your questions or customer service requests
  • Fulfilling legal and regulatory requirements

Data Processors and Third Parties

Queen's Park Flowers works with third-party service providers (“processors”) who process certain data on our behalf. These may include:

  • Payment Processors: To handle card payments securely (we do not store your payment details on our servers)
  • Delivery Partners: Individuals or companies who assist with local deliveries
  • IT Service Providers: Companies providing secure hosting, order management systems, or communication platforms

All processors are contractually bound to process your data only as instructed and maintain strict confidentiality and security in accordance with GDPR.

Data Retention

Queen's Park Flowers retains your personal data only as long as required for the purposes it was collected, including satisfying legal, accounting, or reporting requirements. Specifically:

  • Order and Contact Data: Retained for up to 7 years to comply with financial and tax obligations
  • Correspondence: Retained for up to 2 years after order completion, unless a longer period is required for legal reasons
  • Marketing Data (where consent is given): Retained until you unsubscribe or withdraw consent

Once the retention period elapses, your data will be securely deleted or anonymised.

Your Rights Under GDPR

As a data subject, you have certain rights regarding the data we hold about you:

  • Right to Access: You can request a copy of your personal data held by us
  • Right to Rectification: You may ask us to correct incomplete or inaccurate data
  • Right to Erasure: You can request deletion of personal data where it is no longer needed, or if processing was based on consent and you withdraw consent
  • Right to Restrict Processing: You have the right to request that we suspend processing of your data in certain circumstances
  • Right to Data Portability: You can request that we provide your data to you or another controller in a structured, commonly used, machine-readable format
  • Right to Object: You have the right to object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time

If you wish to exercise any of these rights, please contact us using the details available on our website or in store. For your protection, we may need to verify your identity before processing your request.

Data Security

Protecting your personal information is a top priority for Queen's Park Flowers. We use appropriate physical, technical, and organizational measures to secure your data, prevent unauthorized access, loss, or misuse. Examples include secure servers, encrypted payment processes, and access controls for all staff and partners handling personal data.

International Transfers

Your personal data is typically stored and processed within the United Kingdom or the European Economic Area (EEA). If any transfer of data outside these regions is necessary, we ensure equivalent safeguards are in place as required by GDPR, such as standard contractual clauses.

Policy Updates

From time to time, we may update this Privacy Policy to reflect new legal requirements, changes to our business, or improvements in data protection. The latest version will always be available in store and on our website. We encourage customers to review the policy periodically.

Contact and Complaints

If you have any questions about this Privacy Policy or how your data is handled, please contact Queen's Park Flowers using the details provided in store or on our website. Additionally, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority if you believe your data has been mishandled.

Scope of Policy

This Privacy Policy applies to all customers placing orders with Queen's Park Flowers from Queen's Park and the surrounding districts. By placing an order, you agree to the collection and use of your data as described above, in line with GDPR requirements.