We are committed to protecting and respecting your privacy. This privacy notice explains how Maison de Fleurs (“we”, “our”, “us”) collects, uses and shares our customers’ (“you”, “your”) personal data, and your rights in relation to the personal data we hold. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
- How we collect your information
We may collect your personal data:
- from the information you provide to us when you fill in forms on our website (for example, an order, marketing or problem reporting form); talk to us on the phone; email, or otherwise;
- from the information provided to us when you browse our website;
- from the cookies that we place on our website. (A cookie is a small file of letters and numbers that we put on your device if you agree. You can set your browser to reject cookies, but this may negatively affect your ability to use the site. These cookies allow us to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse our website and also allows us to improve our site).
- The types of information we collect
We will collect and process the following data about you (and about your device, when you use our website):
- your name, address, email address and phone number;
- financial and credit card information;
- technical information, including your internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
- information about your website visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
- How we use your information
We use information held about you in the following ways:
- to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
- to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
- to provide you with information about goods or services we feel may interest you.
Note: If you are an existing customer, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale or negotiations of a sale to you. If you are a new customer we will contact you by electronic means only if you have consented to this. If you do not want us to use your data in this way, please tick the relevant box situated on the form on which we collect your data (the order form);
- to notify you about changes to our service;
- to ensure that content from our site is presented in the most effective manner for you and for your computer;
- to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
- as part of our efforts to keep our site safe and secure;
- to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
- The legal basis for processing your information
We may process your personal data for the above purposes because:
- it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into such a contract;
- it is necessary for our or a third party's legitimate interests. Our "legitimate interests" include our commercial interests in operating the company in a professional, sustainable manner, in accordance with all relevant legal and regulatory requirements;
- it is necessary for compliance with a legal obligation to which we are subject;
- it is necessary for the establishment, exercise or defence of legal claims (in certain circumstances, for example where we defend our rights or property, including our brand);
- we have your specific or, where necessary, explicit consent to do so.
- Sharing your information with others
For the purposes referred to in this privacy notice and relying on the legal bases for processing as set out above, we may share your personal data with certain third parties, including:
- business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you, for example payment gateway providers that helps us to process payments;
- advertisers and advertising networks that require the data to select and serve relevant adverts to you and others;
- analytics and search engine providers that assist us in the improvement and optimisation of our site.
- Where and how we store your information
All information you provide to us is stored on our secure servers based in the EU. In the case of credit card information, this is processed by our payment gateway provider. Any payment transactions will be encrypted using SSL technology.
Note: Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
- How long your information is kept
We keep your personal data for 2 years after an order is placed with us. However, some information may be retained for longer than this, for example email address, name
If you have subscribed to marketing communications from us we will retain your information for this purpose until you ask us to stop communicating with you.
- Your rights
Under the GDPR, with effect from 25 May 2018, you have the following rights in relation to our processing of your personal data:
- to obtain access to, and copies of, the personal data that we hold about you;
- to require us to correct the personal data we hold about you if it is incorrect;
- to require us to erase your personal data in certain circumstances;
- to require us to restrict our data processing activities in certain circumstances (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of your transmitting that personal data to another data controller;
- to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights;
- where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.
Please note that the above rights are not absolute, and we may be entitled to refuse your requests where exceptions apply. For example, if you ask for your personal data to be erased, we may nevertheless continue to maintain certain details about you for our accounting and audit purposes and to comply with our legal obligations.
- Changes to our Privacy Notice
Any changes we make to our Privacy Notice in the future will be posted on this page. Please check back frequently to see any updates or changes.
If you have any questions about this Privacy Notice, or if you would like to change your communications preferences, or exercise any of your legal rights in respect of your personal data, please contact: firstname.lastname@example.org.
You have the right to complain about the processing of your data to the UK Information Commissioner’s Office. For more information about this body and how to make a complaint, please see www.ico.org.uk.