Stratford Flowers Privacy Notice

Introduction

Stratford Flowers (“we”, “us” or “our”) is dedicated to upholding your privacy and handling your personal data transparently and lawfully. This Privacy Policy explains how we handle your personal data when you place an order with Stratford Flowers as a customer in Stratford and the surrounding districts. Our policy is compliant with the General Data Protection Regulation (GDPR) and outlines what data we collect, how we use it, the lawful basis for processing, how long we retain data, the role of data processors, and the rights you have regarding your information.

Who This Policy Applies To

This policy applies to all individuals who place orders with Stratford Flowers in Stratford and surrounding districts. By engaging our services, you confirm that you understand and agree to this Privacy Policy.

Personal Data We Collect

When you use our services, we may collect and process the following types of personal data:

Identification Data: Name, delivery recipient’s name.
Contact Data: Delivery address, billing address, postcode, and occasionally telephone numbers if provided for delivery arrangements.
Order Details: Flower type, special instructions, message cards, and any customization notes you provide.
Transaction Data: Order number, payment status (note: we do not store or process your full card details; payment processing is handled by third-party providers).
Marketing Preferences: If you consent to receive marketing communications, we will retain your preference and contact details for this purpose.
Technical Data: IP address and browser details when you access our website, as necessary for security and analytics.

Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful basis for all data processing. Stratford Flowers processes your data based on the following grounds:

Contractual Necessity: We require your data to fulfil your order, process payment, and deliver your purchase.
Legitimate Interest: We use data for purposes such as quality assurance, customer service, and internal record-keeping. This is always done in a manner that does not override your rights and freedoms.
Legal Obligation: We may retain certain data to comply with relevant laws, such as financial record-keeping.
Consent: If you opt in to receive marketing messages, we rely on your consent, which you can withdraw at any time.

How We Use Your Data

Your information is used to:

Process and deliver orders accurately
Contact you if clarification is needed for an order or delivery
Issue invoices and receipts
Respond to your questions or concerns
Send marketing updates if you have given consent
Comply with applicable laws and regulations
Monitor and improve our website and services

Retention of Your Data

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy. Typically, order and transaction data are retained for up to seven years to satisfy financial and tax reporting obligations. If you have consented to receive marketing communications, we will keep your contact information for this purpose until you withdraw your consent or unsubscribe. Non-essential data, such as delivery instructions, are erased within six months of order completion unless required for customer service or legal reasons.

Our Data Processors

Stratford Flowers works with selected processors to provide a high-quality, secure service. Data processors may include:

Payment providers: Third-party services that process card payments securely. Stratford Flowers does not view or retain complete credit card data.
Couriers and delivery partners: To ensure your flowers are delivered correctly, addressing and contact data are shared only as necessary for the delivery.
IT providers: Companies that support our website or data hosting services; these parties act strictly according to our instructions and applicable laws.

We ensure all processors comply with GDPR and use data exclusively for the intended purpose. We do not sell, rent, or exchange your personal data with third parties for marketing purposes.

Your Rights Under GDPR

As a Stratford Flowers customer, you have several rights regarding your personal data:

The right to access: Request a copy of the personal data we hold about you.
The right to rectification: Have inaccurate or incomplete data corrected.
The right to erasure: Ask for your data to be deleted when it is no longer needed or if you withdraw consent (where relevant).
The right to restriction: Ask us to restrict further processing of your data in certain cases.
The right to object: Object to processing based on legitimate interests or direct marketing at any time.
The right to data portability: Request that your data be transferred to you or another service provider in a structured, commonly used format.
The right to withdraw consent: Where processing is based on your consent, you may revoke it at any time without affecting the lawfulness of processing before withdrawal.
The right to lodge a complaint: If you believe your data has been handled unlawfully, you have the right to contact your national data protection authority.

Security and Safeguarding Your Information

We take appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or disclosure. Our systems are regularly reviewed to ensure your information remains secure and confidential.

Policy Updates

This privacy policy may be updated to reflect changes in our processes, legal requirements, or based on customer feedback. We recommend reviewing this policy periodically for the latest information about our privacy practices. Continued use of our services following updates implies acceptance of the revised policy.

Contact Information

If you have questions about this policy, wish to exercise your rights, or need further information about our privacy practices, please contact Stratford Flowers via the methods outlined on our website or in your order documentation.