Crayford Flowers Customer Privacy Policy

Our Commitment to Your Privacy

At Crayford Flowers, we are dedicated to protecting the privacy and security of our customers. This Privacy Policy applies to all individuals placing orders with Crayford Flowers from Crayford and the surrounding districts. It explains the types of data we collect, our lawful basis for processing this information, our retention practices, details on data processors, and your rights under the General Data Protection Regulation (GDPR).

What Personal Data We Collect

We collect only the personal data necessary to process your flower orders, fulfill our contractual obligations, and provide you with an exceptional customer experience. The data we collect may include:

• Identity Data: Name, title
• Contact Data: Delivery address, billing address, phone number (if provided physically or by request), and occasionally delivery instructions
• Order Data: Details of products ordered, delivery date and occasion (e.g., birthdays, anniversaries)
• Payment Data: Limited payment information necessary to process transactions (note: we do not store card details; these are processed securely by our payment processors)
• Communication Data: Any correspondence or messages related to your orders

Lawful Basis for Processing Your Data

We process your personal data according to one or more lawful bases as defined under GDPR:

• Performance of a Contract: Most data is collected to process and deliver your orders, and to communicate regarding your purchase.
• Legal Obligation: In certain cases, we are required to keep transaction records for tax or accounting reasons.
• Legitimate Interests: We use your data to improve our service, prevent fraud, or defend our legal interests, only when these interests do not override your fundamental rights.
• Consent: For any use of your data not covered above, such as direct marketing, we will ask for your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

Crayford Flowers uses your data to:

• Process and deliver your flower orders efficiently
• Notify you of your order status and delivery confirmation
• Respond to enquiries or resolve issues relating to your order
• Meet legal and regulatory requirements
• Where you have agreed, send you occasional updates about new products or store news (you may unsubscribe anytime)

How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes it was collected, including for the fulfillment of orders, legitimate business needs, legal obligations, and the resolution of disputes.

Order details and related personal information are typically retained for up to seven years to comply with tax and accounting regulations. Non-essential data collected with your consent, such as marketing preferences, will be deleted or anonymized if you withdraw your consent or after a set period of inactivity.

Data Processors and Third Parties

To carry out our services, Crayford Flowers may need to share data with trusted third-party processors. This may include:

• Payment processors – to securely handle payments
• Delivery partners – to ensure your order reaches its destination
• IT and system support providers – for website hosting, maintenance, or software support

All third-party processors are required to handle your data in compliance with GDPR, ensuring appropriate security and confidentiality. Crayford Flowers does not sell your personal information to any third parties for marketing purposes.

Your Rights Under GDPR

As a customer submitting your personal data to Crayford Flowers, you have specific rights under GDPR, including:

• The right to access: Request a copy of the personal data we hold about you
• The right to correction: Have inaccurate or incomplete personal data corrected
• The right to erasure: Request the deletion of your personal data where there is no compelling reason for its continued processing
• The right to object: Object to certain types of processing, such as direct marketing
• The right to restrict processing: Limit how we use your data in certain circumstances
• The right to data portability: Obtain and reuse your data for your own purposes across different services
• The right to withdraw consent: Where we process data based on your consent, you have the right to withdraw it at any time

To exercise any of these rights, please contact us using the contact details provided on our website or at our Crayford Flowers shop premises. We will respond to your request within the timeframes required by law and in most cases at no cost to you.

Data Security Measures

We employ appropriate technical and organizational security measures to protect your personal data from accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. These measures include secure payment gateways, up-to-date encryption technology, employee training, and restricted access to your personal information.

Changes to This Policy

Crayford Flowers keeps this Privacy Policy under regular review. We may update it to reflect changes in legal or regulatory obligations, or to improve clarity in our disclosures. If significant changes are made, we will take reasonable steps to notify customers placing new orders.

Contact and Further Information

If you have questions, concerns, or would like further information about how your personal data is collected and processed, please visit our shop during business hours or use the contact details available on our website. We are committed to addressing your queries and ensuring your privacy is respected at every stage.