Welcome to www.flowerbx.com (our "website").
If you have any queries about this policy or how we use your personal information, please contact us at firstname.lastname@example.org.
Flowerbx is a company registered in England and Wales with its registered office at 12 Cullen Way, London, NW10 6JZ. You can contact us at this address, or by emailing email@example.com.
We are registered as a data controller with the UK Information Commissioner's Office under number ZA271466.
'Personal data' means any data which can be associated with you as an individual, either directly or indirectly. We collect different information depending on how you use the Services and how you interact with us.
The personal data we may collect includes:
We also collect certain information relating to your payments and transactions via our website. This does not include your payment card details, which you provide direct to our payment processors. (For more information, please see Section 6 ('How do we share your personal information?') below.) We do not collect or store payment card details. Since the introduction of SCA (Strong Customer Authentication), extra security checks may be conducted for online purchases. These are applied at random and you may be asked to authenticate your purchase by entering a unique one-use passcode, which your card issuer will send to your phone.
Our Services are not intended for collecting or transmitting 'special categories' of personal data, such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership or health information. We do not collect data about actual or alleged criminal offences.
a) Personal data you provide to us
We collect personal data from you when you create an account with us , place an order, register for a subscription, interact with us in any other way (such as via email, post, telephone or social media), or provide a testimonial.
We may record or monitor calls that you receive from us or make to us. We do this for security and training purposes and to improve the service we provide to you.
b) Personal data we collect as you use our Services
We collect your technical and usage data, as described above, as you use our Services. Some of this data is collected using cookies, beacons and similar technologies.
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
For full information about the cookies we use, please see Section 13 ('Cookies') below.
c) Data we obtain from third parties
We also receive personal data from our selected our selected partners, but only when you have given your explicit consent to this.
We will only use your information where:
a) We need the information to fulfil our contract with you.
If we have entered into a contract to provide you with our Services (for example, if you have placed an order, signed up for a subscription, or registered to attend one of our events), we will need your personal data in order to do so. The personal data that we use will depend on the service(s) we have agreed. For example:
b) We have a legitimate interest (reasonable business purpose) in doing so.
We will use your information for our legitimate business reasons where our doing so will not unduly affect your rights.
We will use your identity, contact, usage and marketing information to keep our records up to date.
We will use your usage and technical information to:
We may also use any or all of the information above to administer and manage our business in general, to detect and prevent misuse of our Services, and to enforce our Terms and Conditions or any other contract to which we may be a party. If you feel that your interests and fundamental rights outweigh our business purposes, and that we should therefore stop processing your data, please let us know.
c) You have given us your consent.
If you sign up to our mailing lists, we will send you updates and marketing information that you have consented to receive. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send, or by emailing us at firstname.lastname@example.org. We may also contact you for market research purposes if you have consented to us doing so.
If you have accepted the cookies on our website, we will use this information for remarketing and behavioural targeting services, and also to personalise your experience of our website and online services. For full information about the cookies we use, please see Section 13 ('Cookies') below.
d) We need to comply with a legal or regulatory obligation.
In certain circumstances, we may need to retain or use your personal data to comply with regulations and/or the law.
Our Services are not intended to be used by children under the age of 18 years, and we do not knowingly collect children's personal data.
We will share your data:
a) With our trusted third party service providers
Please note that Epsilon Abacus may transfer data outside the EEA. The transfer will take place in the presence of appropriate safeguards, including standard data protection clauses adopted by the EU Commission. If you would like more information on this method of sharing data, please email us at email@example.com.
If you do not wish us for your personal data to be shared in this way, please contact us at firstname.lastname@example.org.
We will only disclose your data to third party service providers under terms of confidentiality, and they will only use your personal data for the purposes stated in this policy.
As noted above, we do not share your payment information with our payment processors - instead, you provide it to them direct. We use Stripe and PayPal. For information about how they use your personal data, please see their privacy notices at https://stripe.com/gb/privacy and https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev. The only exception to this is if we suspect that your account is being misused, in which case we may discuss certain aspects of your transaction history and/or identity details with our payment processors.
b) If you choose to share it via social media
If you choose to interact with us on a public forum, such as social media, our communications may be visible to other users of the platform.
Your personal data may be disclosed or transferred to potential or actual buyers of, investors into or lenders to our business or any of our assets, or any of the advisors or representatives of the above. If so, we will ensure that appropriate confidentiality terms are in place.
Our website is hosted on servers located in the European Union. We do not transfer your personal data outside of the EU.
We are committed to ensuring that your information is secure in order to prevent unauthorised access or disclosure, and we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure your information.
However no transmission of information via the Internet or electronic storage is ever completely secure. Although we take appropriate measures to safeguard against unauthorised disclosures of information, we cannot guarantee the security of your data.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Our website, or other online services, may contain links to third party sites whose information practices may be different than ours. Please consult all third party sites' privacy notices, as we have no control over information that is submitted to, or collected by, third parties.
Third Party Data Processor:
Function - Operation of refer-a-friend programme
Processing activities - Processing customer email addresses and certain order data for the purposes of:
You have the right to:
You also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, be grateful if you would contact us in the first instance so we can endeavour to deal with your concerns directly.
If you wish to exercise any of these rights, please contact us at email@example.com.
To protect your privacy and security, we will take reasonable steps to help verify your identity before granting access or making corrections.
We may amend or modify this privacy notice from time to time. We will post any revised notice on this website, and if the changes are significant, we will notify our members by email.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
This privacy statement was last updated on 29 August 2019.
We use traffic log cookies to identify which pages are being used. This helps us to analyse data about web page traffic and improve our website in order to tailor it to our customers' needs.
Overall, cookies help us provide you with a better website, by enabling us to remember settings so that you don’t have to keep re-entering them whenever you visit a new page; monitoring which pages you find useful and which you do not; displaying information on a website in a way that matches your interests; and remembering key information such as your postcode so that you do not have to enter it repeatedly.
To learn more about cookies and how to manage them, visit AboutCookies.org.
Our website is built on Magento 2. You can view Magento 2 system cookies which our website uses in the table below or at any time by going to http://docs.magento.com/m2/ce/user_guide/stores/cookie-reference.html
We also use Google Analytics to collect information about how people use this website. We do this to make sure it's meeting its users' needs and to understand how we could do it better.
Google Analytics stores information about what pages you visit, how long you are on the site, how you got here and what you click on. We do not collect or store your personal information (e.g.. your name or address), so this information cannot be used to identify who you are. We do not allow Google to use or share our analytics data.
The following cookies are set by Google Analytics: