Flowers Millbank Privacy & Data Protection Policy

Introduction

At Flowers Millbank, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information whenever you place an order with us. This policy applies to all customers ordering flowers from Flowers Millbank, whether you reside in Millbank or the surrounding districts. We comply with the UK General Data Protection Regulation (GDPR) and relevant laws concerning the handling of your personal data.

What Data We Collect

When you place an order with Flowers Millbank, we may collect the following types of data:

  • Personal Identification Details: Your full name, billing address, delivery address, and contact details (such as phone number and, optionally, email address).
  • Order Information: Details of the products you purchase, recipient names and delivery addresses if sending to someone else, special delivery instructions, and any message or note you request to accompany your order.
  • Payment Details: Payment information is processed securely by third-party payment processors; only limited payment-related information is retained by us, such as confirmation of payment status or transaction reference numbers.
  • Website Usage Information: If you use our website, we may collect information about your interaction, such as IP address, browser type, and cookies (see our Cookies Policy for details).

Lawful Basis for Processing Data

Flowers Millbank processes your personal data lawfully, fairly, and transparently. The grounds, under GDPR, for collecting and using your data are:

  • Contractual Necessity: Processing is necessary to fulfil your orders and perform our agreement with you.
  • Legitimate Interests: We may use your data for operational improvement, customer support, and internal analysis, always balancing your rights and interests.
  • Legal Obligation: We may need to process your information to comply with legal or regulatory obligations, such as accounting or tax requirements.
  • Consent: For certain communications or marketing, we will seek your explicit consent, which you may withdraw at any time.

How We Use Your Data

We use your data for the following purposes:

  • To process and deliver your flower order, including arranging delivery and communicating with you regarding your purchase.
  • To provide customer care and manage any queries, complaints, or aftercare services that arise.
  • To improve our services by analysing purchasing trends and preferences (using anonymised or aggregated data wherever possible).
  • To comply with legal and regulatory requirements.
  • If you have opted in, to send occasional updates or marketing related to Flowers Millbank. You remain free to opt out at any time.

Data Retention

Your personal data will be retained only as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typically:

  • Order and delivery data are kept for up to six years to meet our legal and contractual obligations.
  • Marketing or contact details retained for as long as you remain opted-in to receive such communications, or until you exercise your right to withdraw consent.
  • Website and analytics data are retained as per our Cookies Policy or for the minimum period necessary for analysis.

Data Sharing and Processors

Flowers Millbank will never sell or rent your personal information. Your data may be shared with trusted third-party companies—which act as data processors—to help us provide our services. These may include:

  • Courier and delivery service providers to ensure your flowers reach the correct address.
  • Payment service providers to process secure payments for your orders.
  • IT and software support services to ensure our systems function safely and securely.
  • Professional advisers, such as accountants or legal representatives, if required for compliance.

All data processors acting on our behalf are contractually obligated to safeguard your information and may only use it to provide the agreed services to Flowers Millbank.

Data Security

We implement appropriate security measures to protect your data from unauthorised access, accidental loss, or disclosure. Only authorised personnel and approved processors have access to your data, and all access is logged and monitored to prevent misuse.

Your Rights Under GDPR

You have the following rights regarding your data:

  • Access: You can request access to your personal data and obtain a copy of the information we hold about you.
  • Rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Erasure: In certain circumstances, you can ask for your data to be erased (the ‘right to be forgotten’).
  • Restriction: You may ask us to restrict processing of your data in specific situations.
  • Objection: You can object to processing where we rely on legitimate interests or for direct marketing purposes.
  • Portability: You may request that your data be transferred to another service provider in a structured, commonly used, and machine-readable format.
  • Withdraw Consent: If processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of your rights, please contact us using the details provided on our website or in your order confirmation.

Updates to This Policy

Flowers Millbank reserves the right to update this Privacy Policy from time to time. The most current version will always be available on our website. We encourage you to review this policy regularly for any changes that may affect you.

Contact and Further Information

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch using the contact details displayed on our website. We will do our best to address any questions or concerns promptly and to your satisfaction.