Dalston Flowers GDPR Privacy Policy

Introduction

This Privacy Policy explains how Dalston Flowers ('we', 'us', 'our') collects, uses, stores, and safeguards your personal data when you place orders with us from Dalston and surrounding districts. As a business based in the United Kingdom, we are committed to complying with the General Data Protection Regulation (GDPR). This policy also outlines your rights regarding your personal data. Please read this policy to understand how we process your information.

Scope of this Policy

This policy applies to all customers who place orders with Dalston Flowers in Dalston and the surrounding districts. It covers data collected directly via our website, telephone orders, in-store visits, as well as through partners managing deliveries and payment processing.

What Data We Collect

When you place an order or interact with Dalston Flowers, we may collect the following types of personal data to provide our products and services:

  • Identity Data: Names of the customer, recipient, and any other relevant individuals
  • Contact Data: Addresses, telephone numbers, and (if provided) email addresses
  • Order Information: Details about your order, including delivery instructions, personalized messages, and product choices
  • Payment Data: Payment transaction details (note: we do not store your full card/payment details, as these are processed securely by third-party payment providers)
  • Device and Usage Information: IP address, browser type, device type, and usage data when you visit our website
  • Communications: Correspondence with our customer service, feedback, and complaints submitted

Lawful Basis for Processing Your Data

Under the GDPR, we only process your personal data where we have a lawful basis to do so. The principal lawful bases we rely on are:

  • Contract: Processing is required to fulfil our contract with you (for example, to deliver your order or communicate about your purchase).
  • Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, ensuring website security, or responding to your queries, provided these interests do not override your rights and freedoms.
  • Legal Compliance: We may need to process your data to comply with legal obligations, such as tax or accounting requirements.
  • Consent: Where we ask for your consent (e.g., for marketing communications), you will have the option to provide or withdraw that consent.

How We Use Your Data

Your personal data may be used for the following purposes:

  • Processing and fulfilling your flower orders, including delivery to the specified recipient
  • Communicating with you regarding your order, including confirmation and customer support
  • Managing payments and refunds (through secure payment processors)
  • Improving our services, website experience, and developing new offerings
  • Responding to feedback and handling customer complaints
  • Fulfilling legal or regulatory requirements
  • With your consent, sending you relevant marketing communications (if you opt in)

Data Sharing and Processors

To operate effectively, we may share certain personal data with trusted third parties ('processors') who help us provide our services. These include:

  • Delivery Partners: Couriers or drivers who require recipient details to complete the delivery
  • Payment Processors: Companies who securely handle your payment transactions
  • IT and Website Management Providers: Companies maintaining our website, databases, or communications infrastructure
  • Professional Advisors: Legal, accounting, or business advisors for compliance and support

All processors are contractually bound to safeguard your personal data and may only process it as instructed by Dalston Flowers, in accordance with GDPR. We do not sell or rent your data to third parties for their own marketing purposes.

International Data Transfers

In general, your personal data is stored and processed in the UK or European Economic Area (EEA). If we need to transfer your data outside these areas, we will ensure appropriate safeguards are in place in compliance with data protection laws.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing our services to you and meeting legal, regulatory, or accounting requirements. The specific retention period depends on the nature of your relationship and applicable legal obligations. Typically, order and transaction data is retained for up to seven years for tax and accounting purposes. Where you have consented to marketing communications, we will keep your contact details until you opt out or withdraw your consent.

Your Rights

Under the GDPR, you have several important rights regarding your personal data:

  • Right of Access: Request a copy of your personal data we hold.
  • Right to Rectification: Ask us to correct incomplete or inaccurate information.
  • Right to Erasure: Request deletion of your data where there is no legal reason for retention.
  • Right to Restrict Processing: Ask us to suspend processing of your data in certain circumstances.
  • Right to Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to processing based on legitimate interests, or direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, you may contact us through the methods described on our website or in-store.

Data Security

We continually strive to ensure your data is held securely. We use physical, electronic, and procedural safeguards to protect against unauthorised access, alteration, disclosure, or destruction of your personal information. Only authorised staff and trusted processors are permitted to access your data for legitimate business purposes.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes to our data processing practices or legal obligations. We encourage customers to periodically review this policy for the latest information on our privacy practices. Where appropriate, we will notify customers of significant changes.

Contacting Dalston Flowers

If you have any queries or concerns regarding this Privacy Policy or your data rights, please get in touch via the contact options detailed on our website, or speak to us in person at our Dalston store.