Privacy Policy for Avalon Petals

Avalon Petals is committed to protecting the privacy and security of the personal data we collect from our customers and website visitors. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our online platform and services as a flower store offering fresh cut flowers, bespoke floral arrangements, wedding floristry, event decoration, corporate floral services, sympathy flowers, plant sales, terrariums, floral subscriptions, and flower delivery.

1. Information We Collect

We collect various types of information in connection with the services we provide, which may include personal data:

• Personal Identifiable Information: This includes your name, billing and shipping addresses, email address, telephone number, and payment information (e.g., credit/debit card details), collected when you place an order, subscribe to our floral services, or create an account on our site.
• Recipient Information: If you send flowers or gifts to others, we collect their name, address, and phone number to ensure delivery. We assume you have their consent to provide us with their contact details.
• Order Details: Information about the products you purchase, delivery preferences, special requests related to bespoke arrangements, and order history.
• Communication Data: Records of your correspondence with us via email, phone, or contact forms, including feedback and inquiries.
• Technical Data: Information about your device and how you interact with our online platform, such as your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. This is collected automatically.
• Usage Data: Information about how you use our website, products, and services, including navigation paths, page views, and interactions with features. This is collected automatically.

2. How We Use Your Information

We use the collected information for various purposes, primarily to fulfil our contractual obligations and legitimate business interests:

• Service Provision: To process and fulfil your floral orders, manage your subscriptions, and deliver our bespoke floral arrangements and other products.
• Customer Support: To respond to your inquiries, provide assistance, and resolve any issues related to your orders or our services.
• Account Management: To manage your user account, if you choose to create one, enabling you to track orders and manage personal preferences.
• Marketing Communications: To send you updates, promotions, and information about new products or services, only if you have consented to receive such communications. You can opt-out at any time.
• Website Improvement: To analyse user behaviour, troubleshoot technical issues, and improve the functionality and user experience of our online platform.
• Legal Compliance: To comply with legal obligations, enforce our terms and conditions, and protect the rights, property, or safety of Avalon Petals, our customers, or others.

3. Legal Basis for Processing Personal Data (GDPR)

We rely on the following legal bases for processing your personal data under the General Data Protection Regulation (GDPR):

• Performance of a Contract: When processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (e.g., processing your order).
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, and your interests and fundamental rights do not override those interests (e.g., improving our website, fraud prevention, direct marketing where consent is not required by law).
• Consent: When you have explicitly given consent for specific processing purposes (e.g., sending marketing communications). You have the right to withdraw your consent at any time.
• Legal Obligation: When processing is necessary for compliance with a legal obligation to which Avalon Petals is subject.

4. Sharing Your Information

We do not sell your personal data to third parties. We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf, such as payment processors, delivery services, IT support, and marketing platforms. These providers are obligated to protect your information and use it only for the purposes for which it was disclosed.
• Legal Authorities: When required by law or in response to valid legal requests, such as subpoenas or court orders.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include encryption, firewalls, and secure server environments. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. The precise retention period depends on the type of data and the purpose for which it is processed.

7. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights concerning your personal data:

• The right to be informed: About how your personal data is being used.
• The right of access: To your personal data.
• The right to rectification: To have inaccurate personal data corrected.
• The right to erasure ("the right to be forgotten"): To request that your data be deleted under certain circumstances.
• The right to restrict processing: To limit how your data is used.
• The right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format.
• The right to object: To certain types of processing, including direct marketing.
• Rights in relation to automated decision making and profiling.

To exercise any of these rights, please contact us using the details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

8. Cookies

Our website uses cookies to enhance your browsing experience, analyse site traffic, and for advertising purposes. Cookies are small text files stored on your device. You can manage your cookie preferences through your browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the new policy on our website. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Avalon Petals

7 The Serpentine,

Richmond Green,

Richmond, London,

TW9 1HG,

United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.