Privacy and Cookies

Introduction 

This privacy policy describes the way that we, Belting Blooms, as a data controller, use and protect  any information that you give us when you use this website and/or our services. It tells you what  information we collect about you, how we may use it, and the steps we take to ensure that it is kept  secure. We also explain your rights and how to contact us. 

Should we ask you to provide certain information by which you can be identified, then you can be  assured that it will only be used in accordance with this privacy statement. 

We do update this privacy policy from time to time so please do review this policy regularly. This privacy policy contains: 

1. A few definitions  
2. What personal data do we process?  
3. Why do we process your personal data?  
4. What is the legal basis for processing your personal data?  
5. What about more sensitive data?  
6. Sharing your personal data  
7. How long do we keep your personal data?  
8. Your rights and your personal data  
9. Security 
10. Transfer of data abroad  
11. Further processing  
12. Changes to this privacy policy 
13. Contact details  
14. Use of cookies  
15. A few definitions  

1.1. Your personal data – what is it?  

“Personal data” is any information about a living individual which allows them to be  identified from that data (for example a name, photographs, videos, email address, or  address). Identification can be by the information alone or in conjunction with any other  information. The processing of personal data is governed by the Data Protection Act 2018,  the General Data Protection Regulation 2016/679 (the “GDPR”) and other legislation  relating to personal data and rights such as the Human Rights Act 1998. 

1.2. What is a controller?  

The entity that determines the purposes and means of the processing of personal data. 2. What personal data do we process?

2.1. We will process some or all of the following where necessary to perform our tasks: 2.1.1.Names, titles, and aliases, photographs;  

2.1.2.Contact details such as telephone numbers, addresses, and email addresses;  

2.1.3.Where they are relevant to our work, or where you provide them to us, we may  process other personal or demographic information such as gender, age, date of birth,  marital status, etc; 

2.1.4.Where you make payments for goods and services, financial identifiers such as bank  account numbers, payment card numbers, payment/transaction identifiers, policy  numbers, and claim numbers. 

2.2. We will usually have your personal data because you have directly given it to us. You are  under no obligation to provide us with your personal data though if you choose not to, we may not be able to contact you, tell you about or provide you with goods or services.  

2.3. We will only collect and use your information where we have lawful grounds and legitimate  business reasons for doing so. We will not ask for more information than we need. 

2.4. If you believe that any information we hold is incorrect or incomplete, please email us at  hello@beltingblooms.com and we will promptly correct any incorrect information. 

3. Why do we process your personal data?

3.1. We may use the personal information gathered in our normal course of business primarily  to provide the products, services, offers or news you have requested, and also for  administration purposes with your consent: 

3.1.1. to confirm identification when you contact us 

3.1.2. to keep you informed of any special offers or promotions that we believe might be of particular interest to you 

3.1.3. to communicate with you in the event that any products or services you have requested are unavailable 

3.1.4. for credit assessment 

3.1.5. to review the conduct of and to administer/operate your accounts 

3.1.6. for statistical analysis, including automated techniques 

3.1.7. for record-keeping purposes 

3.1.8. for market research 

3.1.9. to track activity on our website 

3.1.10. to improve and monitor our customer service to you 

3.1.11. the prevention of crime and fraud 

3.1.12. for any other purposes deemed necessary for business 

3.2. By providing your information, you consent to the use of the information as set out in this  policy. 

4. What is the legal basis for processing your personal data?

4.1. Most of our data is processed because it is necessary for the performance of a contract with  you, or to take steps to enter into a contract. An example of this would be processing your  personal data to deliver a bouquet of flowers or to provide you our services in connection  with your wedding flowers.  

4.2. In exceptional circumstances we might have to process your data because it is necessary for  our legitimate interests, or the legitimate interests of a third party. An example of this  would be if we suspected fraud or theft. We will always take into account your interests,  rights and freedoms.  

4.3. We will obtain your consent where we are required by law, for instance, when sending  email communications to you about our activities. You always have the right to revoke your  consent. You can do so by emailing hello@beltingblooms.com. 

5. What about more sensitive data? 

5.1. We believe the data we process is highly unlikely to constitute special category data.  Special category data refers to data which is suggestive of your religious beliefs, racial or  ethnic origin, sex life, mental and physical health, details of injuries, medication/treatment  received, political beliefs, labour union affiliation, genetic data, biometric data, data  concerning sexual orientation and criminal records, fines and other similar judicial records.  

6. Sharing your personal data 

6.1. Your personal data will be strictly confidential and will only be shared with third parties  where necessary for the performance of our service or where you have provided prior  consent.  

6.2. In order to provide our products and services, we may need to pass information on to some  or all of the following (but only where necessary): our agents, suppliers and sub-contractors  or where we appoint other organisations to carry out some of the processing activities on  our behalf, such as mailing houses or printers. 

7. How long do we keep your personal data? 

7.1. We will keep some records permanently if we are legally required to do so. We may keep  some other records for an extended period of time. In general, we will endeavour to keep  data only for as long as we need it. This means that we may delete it when it is no longer  needed. 

8. Your rights and your personal data 

8.1. You have the following rights with respect to your personal data:  

8.2. When exercising any of the rights listed below, in order to process your request, we may  need to verify your identity for your security. In such cases we will need you to respond  with proof of your identity before you can exercise these rights.  

8.2.1.The right to access personal data we hold on you. At any point you can contact us to  request the personal data we hold on you as well as why we have that personal data,  who has access to the information and where we obtained the personal data from.  Once we have received your request we will endeavour to respond within one month. 

There are no fees or charges for the first request but additional requests for the same  personal data may be subject to an administrative fee.  

8.2.2.The right to correct and update the personal data we hold on you. If the personal data  we hold on you is out of date, incomplete or incorrect, you can inform us and your  personal data will be updated.  

8.2.3.The right to have your personal data erased. If you feel that we should no longer be  using your personal data or that we are illegally using your personal data, you can  request that we erase the personal data we hold. When we receive your request we  will confirm whether the data has been deleted or the reason why it cannot be deleted  (for example because we need it for our legitimate interests or regulatory purpose(s)).  

8.2.4.The right to object to processing of your personal data. You have the right to request  that we stop processing your personal data. Upon receiving the request we will contact  you and let you know if we are able to comply or if we have legitimate grounds to  continue to process your personal data. Even after you exercise your right to object,  we may continue to hold your personal data to comply with your other rights or to  bring or defend legal claims.  

8.2.5.The right to restriction of your personal data. You have the right to ask us to restrict  our use of your personal data in certain specific circumstances e.g. if there is a dispute  about the accuracy of your personal data.  

8.2.6.The right to data portability. You have the right to request that we transfer some of  your personal data to another controller in certain circumstances. We will comply with  your request, where it is feasible to do so, within one month of receiving your request.  

8.2.7.The right to withdraw your consent to the processing at any time for any processing of  personal data to which consent was sought. You can withdraw your consent easily by  telephone, email, or by post (see Contact Details below).  

8.2.8.The right to complain to the Information Commissioner’s Office. 

9. Security 

9.1. We are committed to ensuring that your information is secure. In order to prevent  unauthorised access or disclosure, we have put in place suitable physical, electronic and  managerial procedures to safeguard and secure the information we collect online. 

10. Transfer of Data Abroad  

10.1. Any personal data transferred to countries or territories outside the UK or the EU  will only be transferred where we have put in place appropriate safeguards to protect your  personal data usually through contracts approved by the European Commission. Please  contact us if you have any questions about the mechanisms we put in place to protect any  personal data being transferred overseas. 

11. Further processing

11.1. If we wish to use your personal data for a new purpose, not covered by this Privacy  Notice, then we will provide you with a new notice explaining this new use prior to  commencing the processing and setting out the relevant purposes and processing  conditions. Where and whenever necessary, we will seek your prior consent to the new  processing. 

12. Our website and use of Cookies  

12.1. When you visit www.beltingblooms.com, information may be stored. This is  commonly referred to as a cookie. A cookie is a small file which asks permission to be  placed on your computer’s hard drive. Once you agree, the file is added and the cookie  helps analyse web traffic or lets you know when you visit a particular site. Cookies allow  web applications to respond to you as an individual, tailoring its applications to your needs,  likes and dislike by gathering and remembering information about your preferences. 

12.2. By tracking how our site is used, cookies help us to provide you with a better  website, by enabling us to monitor which pages you find useful and which you do not. A  cookie in no way gives us access to your computer or any personal information about you,  other than the data you choose to share with us. 

12.3. You can choose to accept or decline cookies. Most web browsers automatically  accept cookies, but you can usually modify your browser to decline cookies if you so wish.  This may prevent you from taking full advantage of the website. For more information  about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. 

13. Changes to this privacy policy 

13.1. We keep this privacy policy under regular review and we will place any updates on  our website www.beltingblooms.com. If we make a significant change, we will use  reasonable efforts to notify you. This privacy policy was last updated in January 2021. 

14. Contact details  

14.1. The full name of our legal entity is Sarah Hall t/a Belting Blooms 

14.2. Please contact us if you have any questions about this privacy policy or the  information we hold about you or to exercise all relevant rights, queries or complaints by  emailing hello@beltingblooms.com or by calling 07378 680147 

14.3. You can contact the Information Commissioners Office on 0303 123 1113 or via  email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s  Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.