Our Commitment to Your Privacy at Flowers Luton

Privacy Policy for Customers Ordering from Flowers Luton

At Flowers Luton, we respect your privacy and are committed to safeguarding the personal information you share with us. This Privacy Policy applies to all customers placing orders with Flowers Luton from Luton and the surrounding districts. Here, we outline how and why your data is collected, the principles that guide our data handling, and your rights under the General Data Protection Regulation (GDPR).

What Personal Data We Collect

When placing an order with Flowers Luton, we may collect the following categories of personal information:

• Identity Data: Such as your full name and, where applicable, the recipient's name.
• Contact Data: Including your address, delivery address, and telephone number.
• Order Data: Details about the products you order, preferences, and any messages you wish to pass on to recipients.
• Payment Data: Details necessary to process your purchase, such as card information (processed securely and never stored by Flowers Luton), and transaction history.
• Communication Data: Your preferences for receiving communications from us, and records of correspondence.

We do not intentionally collect sensitive personal data (such as health or religious information) unless it is voluntarily provided, for example, in a message accompanying an order. In such cases, we process this data with extra care and always in compliance with legal requirements.

Purpose and Lawful Basis for Processing Your Data

Flowers Luton only processes your personal data when we have a valid legal basis under GDPR. These include:

• Contractual Necessity: We need your data to fulfil your order, process payment, deliver products, and provide customer support.
• Legal Obligations: Certain retention of records or disclosures are required by law, such as for financial accounting or fraud prevention.
• Legitimate Interests: To improve our services, prevent fraud, and communicate product and promotional information (only where our interests do not override your rights).
• Consent: Where required, we will ask for your explicit consent, for example, to send you marketing communications.

How Long We Keep Your Personal Data

Your personal data will be retained only as long as necessary to fulfil the purposes for which it was collected, to satisfy legal, accounting, or reporting requirements, and to resolve any potential disputes. For example:

• Order and transaction records will be kept for up to seven years, in line with accounting legal obligations.
• Marketing data will be retained as long as your consent remains valid or until you unsubscribe.
• Correspondence may be retained while it is relevant to your order or required to resolve inquiries.

Once the retention period expires, your data will be securely deleted or anonymised.

Trusted Data Processors and Third Parties

Flowers Luton may share your personal data with carefully-selected third parties—known as data processors—who support our operations, always under strict contractual controls and only for specified purposes. These may include:

• Payment service providers (secure payment gateways).
• Delivery companies or couriers involved in handling your orders.
• IT service providers who manage our website and data storage.
• Accounting and financial service partners for legal compliance and record-keeping.

We never sell or rent your personal information. Where data is transferred outside the UK/European Economic Area, we ensure suitable safeguards are in place as required by GDPR.

Your Rights Under GDPR

Under GDPR, you have certain rights concerning your personal data. Flowers Luton is committed to facilitating the exercise of these rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to inaccurate or incomplete data.
• Right to Erasure: You have the "right to be forgotten" and can request the deletion of your data when no longer necessary for the purposes collected.
• Right to Restrict Processing: You may request restricted use of your data in certain circumstances.
• Right to Data Portability: Where applicable, you may obtain and reuse your personal data across different services.
• Right to Object: You can object to our processing of your information where we rely on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw this at any time.

If you wish to exercise any of your rights, please contact us as outlined in our customer service materials. We will respond promptly to all legitimate requests.

Keeping Your Data Secure

Flowers Luton takes security seriously and has implemented appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. Our website uses secure protocols, access to data is restricted, and our staff receive regular data protection training.

Policy Scope and Updates

This Privacy Policy applies to all personal data collected from customers placing orders with Flowers Luton in Luton and surrounding districts. Our policy is reviewed regularly and may be updated from time to time to comply with legal requirements or improve transparency. Substantial changes will be communicated through our website or as part of your customer journey.

Contact and Further Information

If you have any questions or concerns about how Flowers Luton uses your personal information, or if you wish to exercise your rights under GDPR, you are welcome to reach out using the usual customer service contact methods provided in our order materials or website. If you remain unsatisfied, you may also contact the Information Commissioner's Office (ICO), which supervises data protection in the UK.

Thank you for choosing Flowers Luton. We value your trust and are dedicated to protecting your privacy at all times.