Bankside Flowers Privacy Statement

Introduction

This Privacy Policy outlines how Bankside Flowers collects, processes, and protects the personal information of our customers placing orders from Bankside and the surrounding districts. We value your privacy and are committed to complying with the General Data Protection Regulation (GDPR) and all applicable data protection laws. This policy details what data we collect, the basis for processing, data retention, use of processors, and the rights you have over your personal information.

Scope of This Policy

This policy is applicable to all customers who place orders with Bankside Flowers, whether in-person, by telephone, or through our website, for delivery within Bankside and nearby districts. By placing an order or communicating with us regarding our products and services, you consent to the practices described in this Privacy Policy.

What Data We Collect

We collect and process various types of personal data necessary to provide you with our floral products and services. Depending on how you interact with us, the data we may collect includes:

  • Identity information: Your full name and, if applicable, the name of the recipient of the flowers.
  • Contact details: Billing and delivery addresses, telephone numbers, and, if relevant, email addresses.
  • Order details: Information about the floral arrangement or product ordered, special requests, and delivery instructions.
  • Payment information: Transaction details such as amount, payment method, and reference number. (Please note: We do not store or process full card details on our servers.)
  • Communications: Details of your correspondence with us, such as inquiries, feedback, or complaints.
  • Technical information: If you use our website, we may collect your IP address and browser information for security and analysis.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to collect and use your personal data. Bankside Flowers processes your personal information under the following grounds:

  • Contract: Most data processing is necessary to fulfill our contract with you, such as processing your order and arranging delivery.
  • Legal obligation: We are required by law to keep certain transaction and financial records.
  • Legitimate interests: We may use your data to improve our services, resolve issues, or protect our business against fraud, provided these interests do not override your rights.
  • Consent: Where legally required, such as for sending marketing communications, we will only do so with your explicit consent. You have the right to withdraw consent at any time.

How We Use Your Data

Your personal data is used to:

  • Process and deliver your order efficiently and accurately
  • Communicate with you regarding your order, requests, or feedback
  • Comply with legal and regulatory requirements
  • Respond to any inquiries or complaints
  • Enhance our offerings and customer service (for example, analysing order trends)

Data Retention

Bankside Flowers retains your personal information only as long as necessary for the purposes set out in this policy or as required by law. Typically, we hold transaction and order information for up to seven years to comply with tax, legal, and accounting requirements. Other types of data, such as correspondence or complaints, may be kept for a shorter period, usually no more than two years after resolution. After these periods, your personal data will be securely deleted or anonymised.

Data Processors and Third Parties

We sometimes use trusted third-party service providers (data processors) to assist in delivering our services, such as:

  • Payment processing partners to handle transactions securely
  • IT service and cloud providers for data storage and website functionality
  • Delivery partners to fulfill orders outside our core delivery area

All third parties acting on our behalf are bound by strict contractual obligations to protect your personal data, act only in accordance with our instructions, and comply fully with data protection laws. Bankside Flowers does not sell or share your information with other organisations for their own marketing purposes.

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right to access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request correction of any inaccurate or incomplete data.
  • Right to erasure: You can request deletion of your personal data where there is no lawful basis for retention.
  • Right to restriction: You can ask us to suspend processing of your data under certain circumstances.
  • Right to data portability: You can request transfer of your data to another service provider in a structured, commonly used format.
  • Right to object: You may object to processing based on legitimate interests, including profiling and direct marketing.
  • Right to withdraw consent: Where you have given consent, you may withdraw it at any time; this will not affect lawfulness of processing before withdrawal.

If you wish to exercise any of your rights, please write to us or visit our premises. We may require proof of identity before fulfilling your request, to protect your data’s security.

Security of Your Data

We are committed to safeguarding your information. Bankside Flowers implements appropriate technical and organisational measures to protect your data against accidental loss, destruction, unauthorised access, or disclosure. Payment processing is handled using secure, industry-standard protocols. Our staff are trained in data protection and we conduct regular reviews of our security policies and contracts with third-party processors.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or technology. Any significant changes will be communicated to customers in an appropriate way. Please refer to this page for the latest version of our policy.

Contact and Complaints

If you have any questions, concerns, or wish to make a complaint about how your data has been handled, please contact us in writing or visit our shop directly. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local regulatory authority.

Thank you for trusting Bankside Flowers with your personal information. Your privacy is important to us, and we are committed to keeping your data secure and only using it in ways that respect your rights and expectations.