Hammersmith Flowers Privacy Policy

Introduction

This Privacy Policy explains how Hammersmith Flowers collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). This policy is applicable to all customers placing orders with Hammersmith Flowers from Hammersmith and the surrounding districts. We are committed to keeping your personal information confidential and only using it in ways you would expect and allow.

What Data We Collect

To provide our flower delivery and related services, Hammersmith Flowers collects certain information from customers. The types of data we may collect include:

• Identity Data: Name, surname, and, where relevant, details given for order recipients.
• Contact Data: Delivery address, billing address, contact telephone numbers, and, if provided, optional means of contact.
• Order Information: Details of purchases, delivery instructions, and preferences related to your orders.
• Payment Information: Details required to process payments, such as card information. (Payment details are transmitted via secure payment processors and are not stored by us after order completion.)
• Communication Data: Information sent by you when contacting us regarding orders, queries, or feedback, as well as our responses to you.
• Technical Data: When you interact with our website or digital channels, technical details such as IP address, device type, and browsing actions may be collected for security, analytics, and functionality.

Lawful Basis for Processing Your Data

Hammersmith Flowers always processes personal data on a lawful basis as set out in Article 6 of the GDPR. For the purposes relevant to your orders and our relationship, our lawful bases include:

• Contractual Necessity: Processing your information is necessary to fulfill orders, manage deliveries, and provide requested customer services.
• Legal Obligation: We retain information as necessary to comply with applicable law (e.g., tax, accounting, or regulatory requirements).
• Legitimate Interests: For responding to queries, improving our services, and performing basic analysis—for instance, to ensure efficient delivery operations, provided this does not infringe upon your interests or rights.
• Consent: Where required, for example in sending marketing communications, we will seek and respect your explicit consent. You may withdraw consent at any time.

Data Retention

We only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including to satisfy legal, accounting, or reporting requirements. Typically, your order and contact details are retained for up to seven years for legal and tax purposes unless a longer period is required by law. Payment data, as noted, is not stored by us after order completion. If you request erasure of your data, we will consider this in accordance with our legal obligations and the circumstances of your request.

Data Processors and Third Parties

At Hammersmith Flowers, we share your personal data only when essential, in alignment with GDPR requirements:

• Payment Processors: We use third party payment service providers to securely process customer transactions. Your payment information is handled only by these providers and is not retained or accessed by Hammersmith Flowers after payment processing.
• Delivery Partners: Some deliveries may be made via trusted third parties or local courier networks to ensure your flowers arrive promptly. Only the minimal, necessary data (name, address, and contact for delivery) is shared.
• IT and Support Services: Technical and support infrastructure required to maintain our website, manage communication, and backup data may also have access under strict contractual safeguards. These parties are not allowed to use your data for any other purpose.

We never sell or trade your personal data to any other organizations or third parties. All external parties are required to strictly respect the confidentiality and security of your data, and act only on our instructions.

Your Rights Under GDPR

As a customer of Hammersmith Flowers and within the scope of the GDPR, you have important rights regarding your personal information. These include:

• Access: The right to request access to your personal data and receive information about how we process it.
• Rectification: The right to request correction of inaccurate or incomplete personal data we hold about you.
• Erasure: The right to request the deletion or removal of your personal data in certain circumstances, such as where it is no longer necessary for the purposes collected.
• Object or Restrict: The right to object to, or request restriction of, processing in some circumstances, such as direct marketing.
• Data Portability: The right to receive your personal data in a structured, commonly used format, and to have it transferred to another service provider if requested.
• Withdraw Consent: Where we rely on your consent for any processing, you have the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us using the contact methods provided on our website or when placing your order. We will respond to all legitimate requests in accordance with GDPR requirements.

Data Security

We implement organizational and technical measures to keep your personal data safe and secure. These measures include physical security, access controls, encryption, secure payment processing, and staff training for data protection awareness. Our systems are regularly reviewed to protect against data loss or misuse.

Policy Review and Updates

We may review this Privacy Policy periodically to ensure continued compliance with privacy laws and our business practices. Any significant changes will be clearly indicated on our website or communicated to you at the time of your order if relevant.

How to Contact Us

If you have any questions about this Privacy Policy or your personal data, or would like to exercise your rights, please use the contact details available on our website or provided during your ordering process.

This Privacy Policy applies to all customer orders from Hammersmith Flowers in Hammersmith and surrounding districts, and is effective from the date published.