Privacy Policy for Zenith Blooms
At Zenith Blooms, we are committed to protecting your privacy. This policy outlines how we collect, use, and protect your personal data when you interact with our online platform, purchase our floral arrangements, or engage with our services.
1. Information We Collect
We collect various types of information in connection with the services we provide, including:
- Personal Identifiable Information: This includes your name, delivery address, billing address, email address, phone number, and payment information (processed securely through third-party payment gateways). We collect this when you place an order, subscribe to our newsletter, register for a workshop, or contact us directly.
- Recipient Information: If you send flowers to another person, we collect their name, address, and phone number to ensure successful delivery. We assume you have the recipient's consent to provide us with this information.
- Technical Data: Information about your device and how you interact with our site, such as IP address, browser type, operating system, referral sources, pages visited, and time spent on our site. This is collected through cookies and similar technologies.
- Communication Data: Records of your communications with us, including emails and customer service interactions.
2. How We Use Your Information
We use the collected information for the following purposes:
- To Provide Services: To process your orders, deliver floral arrangements, manage plant subscriptions, facilitate workshop registrations, and provide event decor services.
- Customer Support: To respond to your inquiries, provide assistance, and resolve any issues related to our services.
- Marketing and Communication: To send you newsletters, promotional offers, and updates about our products and services, where you have consented to receive such communications. You can opt-out at any time.
- Website Improvement: To analyze how our site is used, troubleshoot technical issues, and improve the user experience, functionality, and content of our online platform.
- Legal Compliance: To comply with legal obligations, enforce our terms and conditions, and protect our rights.
3. Legal Basis for Processing Personal Data
We process your personal data under the following legal bases:
- Contractual Necessity: When processing is necessary for the performance of a contract with you (e.g., fulfilling your order).
- Consent: Where you have given explicit consent for specific processing activities (e.g., subscribing to our newsletter). You have the right to withdraw consent at any time.
- Legal Obligation: When processing is necessary to comply with a legal or regulatory obligation.
- Legitimate Interests: When processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services, preventing fraud).
4. Sharing Your Information
We do not sell, rent, or trade your personal data. We may share your information with:
- Service Providers: Third-party companies that perform services on our behalf, such as payment processing, delivery services, website hosting, analytics, and marketing. These providers are obligated to protect your data and only use it for the purposes for which it was disclosed.
- Legal & Regulatory Authorities: When required by law or in response to valid legal requests, such as court orders or government regulations.
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. This includes using secure servers, encryption, and access controls. While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. When assessing the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means.
7. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right to Access: You have the right to request access to the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data under certain circumstances.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner's Office (ICO) in the UK.
To exercise any of these rights, please contact us using the details provided below.
8. Cookies and Tracking Technologies
Our site uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and support our marketing efforts. You can manage your cookie preferences through your browser settings.
9. Links to Third-Party Websites
Our online platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page, and the revised policy will be effective immediately upon posting. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Zenith Blooms
14 Regent's Park Road,
Primrose Hill,
London, NW1 7SL,
United Kingdom