Earlsfield Florist Privacy Policy

Introduction

This Privacy Policy explains how Earlsfield Florist collects, uses, stores, and protects your personal information when you place orders with us. We are committed to safeguarding the privacy of all customers ordering floral arrangements and related services from Earlsfield and the surrounding districts. This Policy is designed to comply with the General Data Protection Regulation (GDPR) and outlines your rights as a data subject.

Scope of This Policy

This Policy applies to all customers residing in, or placing orders from, Earlsfield and neighbouring districts who engage with Earlsfield Florist through our store, website, or telephone order service. By using our services, you acknowledge the terms set out in this Privacy Policy.

What Personal Data We Collect

We collect the following types of personal data to process your orders and provide the best possible service:

• Identity Data: Your name and, if applicable, the recipient's name for order purposes.
• Contact Data: Billing and delivery address, telephone number, and other contact details you provide during the order process.
• Order Data: Information relating to the products or services you purchase, such as bouquet preferences, delivery instructions, and order history.
• Payment Data: Transaction information, including payment method (note: we do not store your full card details on our systems).
• Communications Data: Records of correspondence with you regarding orders, enquiries, or complaints.
• Technical Data: Limited information about how you interact with our website, such as IP address, browser type, and referring URLs, may be collected via cookies for analytics and security purposes.

Lawful Basis for Processing

Earlsfield Florist processes personal data only when there is a lawful basis to do so. The grounds on which we collect and process your information may include:

• Contractual Necessity: To fulfil our contractual obligations to you, such as processing and delivering your order.
• Legal Compliance: To meet legal and regulatory requirements, such as accounting or tax obligations.
• Legitimate Interests: To improve our business, handle customer service requests, and prevent fraud, where these interests are not overridden by your rights.
• Consent: Where we rely on your consent, for example, to send marketing communications. You are free to withdraw consent at any time.

How We Use Your Personal Data

We use your data for the following purposes:

• To process and complete your orders, including confirming delivery details and managing payments.
• To communicate with you regarding your orders and to respond to your queries or feedback.
• To enhance and personalise your customer experience.
• To ensure our website functions correctly and securely.
• To comply with legal and regulatory requirements.
• If approved by you, to keep you informed about new products, special offers, or other information relevant to Earlsfield Florist.

How Long We Retain Your Data

Your personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Typically, order-related data is retained for a maximum of seven years, in line with legal and regulatory guidance. Data related to marketing communications will be retained only as long as you consent to receive these communications.

Data Sharing and Processors

Earlsfield Florist may share your data with selected third-party service providers (processors) who assist us in delivering our products and services, including payment processors, delivery partners, and IT support services. Where data is shared, we ensure that these entities adhere to strict data protection standards and only process your information on our instructions and in compliance with the GDPR.

Your data will never be sold or shared with third parties for their own direct marketing purposes.

Data Security

We implement appropriate technical and organisational measures to secure your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include secure data storage, regular data access controls, encryption where appropriate, and staff data protection training.

Your Rights Under GDPR

The GDPR grants you several rights regarding your personal data. You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request that we correct inaccurate or incomplete data concerning you.
• Erasure: Request deletion of your personal data, subject to certain conditions (e.g., where retention is not required by law).
• Restriction: Request that we limit the way we process your data in certain circumstances.
• Objection: Object to certain types of processing, such as direct marketing.
• Portability: Request to receive your data in a structured, machine-readable format or transfer it to another data controller where technically feasible.
• Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details on our website or in writing at our registered premises. We will respond to legitimate requests within one month and will inform you if more time is required.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect or process personal data from children. If we learn that we have collected such data, we will delete it promptly unless we are required to retain it by law.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or for other operational reasons. Any significant changes will be communicated via our website. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

How to Contact Us and Lodge a Complaint

If you have any questions about this Privacy Policy or how we handle your personal information, please reach out to us using the contact information provided on our official website or by visiting our premises. If you are not satisfied with our response, you have the right to complain to the relevant supervisory authority for data protection.

This Privacy Policy was last updated in June 2024.