Blooms & Beyond Privacy Policy
This privacy policy describes how Blooms & Beyond collects, uses, and protects personal information when you use our online platform and services. We are committed to protecting your privacy and handling your personal information in a transparent and secure manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Information We Collect
When you use our site or services, we may collect various types of information from or about you. This information falls into categories such as:
Contact Information: Details you provide when placing an order or contacting us, such as your name, recipient's name, delivery address, billing address.
Payment Information: Information required to process payments, such as credit card details or other payment method information. Please note we do not store full payment card details ourselves; this is handled securely by our payment processing partners.
Order Information: Details about the products and services you purchase, including the type of flowers, date of delivery, special instructions, and order history.
Account Information: If you create an account, we collect information like your username and password.
Communication Information: Content of communications with us, such as inquiries or feedback.
Technical Information: Information about your device and your visit to our site, including your IP address, browser type and version, operating system, and browsing behaviour (pages viewed, time spent, clickstream data). This is collected automatically as you interact with our service.
We collect this information when you provide it directly to us, such as when you place an order, register for an account, or contact customer service. We also collect some information automatically as you navigate through our site.
How We Use Your Information
We use the information we collect for various purposes, including:
To Provide Services: Processing and fulfilling your flower orders, including payment processing, delivery arrangement, and customer support.
To Manage Your Account: If you create an account, we use your information to manage your account and provide access to account features.
To Communicate with You: Responding to your inquiries, providing order updates, and sending service-related communications.
To Improve Our Services: Analyzing usage data to understand how our service is used and to make improvements to our website, product offerings, and service delivery.
For Marketing: With your consent where required, sending you promotional information about our products and services.
For Legal and Security Purposes: Detecting and preventing fraud, protecting our rights and property, and complying with legal obligations.
Legal Basis for Processing
Under GDPR, we must have a legal basis to process your personal information. Our legal bases for processing your data include:
Performance of a Contract: Processing is necessary to fulfil your order and provide the services you request (e.g., processing payment, arranging delivery).
Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, managing our business, preventing fraud, and for direct marketing (where not requiring consent). We ensure these interests do not override your fundamental rights and freedoms.
Consent: Where required by law, we may rely on your consent to process certain types of information, particularly for sending marketing communications. You have the right to withdraw consent at any time.
Legal Obligation: Processing is necessary to comply with a legal obligation, such as tax or accounting requirements.
Sharing Your Information
We may share your personal information with third parties only in the following circumstances:
Service Providers: We share information with third-party vendors and service providers who perform services on our behalf, such as payment processors, delivery partners, and IT service providers. These parties are obligated to protect your information and use it only for the purposes for which it was shared.
Legal Compliance and Protection: We may disclose information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
We do not sell your personal information to third parties.
Data Security
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, please be aware that no method of transmission over the internet or electronic storage is entirely secure.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period depends on the nature of the information and the purpose of processing.
Your Data Protection Rights
Under GDPR, you have certain rights regarding your personal data:
Right to Access: You have the right to request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete information we hold about you.
Right to Erasure: You have the right to request that we delete your personal information, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal information, under certain conditions, including for direct marketing.
Right to Data Portability: You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller, where technically feasible.
Right to Withdraw Consent: If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
Right to Complain: You have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner's Office (ICO) in the UK, if you believe we have processed your personal information unlawfully.
To exercise any of these rights, please contact us using the details provided below.
Cookies and Tracking Technologies
Our site uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and assist in our marketing efforts. You can manage your cookie preferences through your browser settings.
Third-Party Links
Our service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children's Privacy
Our service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
Changes to This Privacy Policy
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page. We encourage you to review this privacy policy periodically for any changes.
Contact Us
If you have any questions or concerns about this privacy policy or our data practices, please contact us by writing to:
Blooms & Beyond
15 Spinningfields Way
Suite 301
Manchester, Greater Manchester
M3 3AF
United Kingdom