Florist Wandsworth Privacy Policy

Introduction

This Privacy Policy explains how Florist Wandsworth collects, uses, stores, and protects your personal data when you place an order with us. This policy is designed to meet the requirements of the General Data Protection Regulation (EU 2016/679) ("GDPR"). It applies to all customers placing orders in Wandsworth and the surrounding districts. We are committed to ensuring the privacy and security of your information, and to providing transparency in how your data is handled.

What Data We Collect

Florist Wandsworth collects personal data necessary to process your order and provide our services effectively. The types of data we may collect include:

• Name: To address and personalise your order.
• Contact Information: Such as your delivery address and telephone number to fulfil orders and for customer support.
• Order Details: Details about the flowers and products you request, including any messages and delivery preferences.
• Payment Information: Processed securely through our chosen payment processors. We do not store card details on our servers.
• Communication Records: Any correspondence between you and Florist Wandsworth for the purposes of customer support and service improvement.
• Technical Data: Information such as IP address, browser type, and device information collected via our website for security, analytics and improvement of user experience.

Lawful Basis for Processing

Under the GDPR, we must have lawful grounds to collect and process your personal data. Florist Wandsworth relies on the following lawful bases:

• Contractual Necessity: Most of the data we collect is necessary to perform our contract with you, such as processing and delivering your order.
• Legitimate Interest: We may use your data to improve our services, ensure security, and correspond with you where appropriate, as long as our interests are not overridden by yours.
• Legal Compliance: We may need to process your data to comply with legal or regulatory obligations.
• Consent: In some cases, if we wish to use your data for additional marketing or communication purposes, we will request your explicit consent, which you may withdraw at any time.

How We Use Your Data

Florist Wandsworth uses your personal information for the following purposes:

• To process, fulfil, and deliver your orders accurately.
• To communicate with you regarding your orders or requests.
• To improve our services based on your feedback and interaction.
• To manage payments and prevent fraudulent transactions.
• To comply with applicable laws and regulations.

Retention of Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, we will keep your data for up to seven years from the date of your last transaction or as long as required by law. After this period, your data will be securely deleted or anonymised.

Processors and Data Sharing

To provide our services, we may engage third-party service providers (known as processors) that process data on our behalf. These include, but are not limited to, payment gateways, IT service providers, delivery partners, and website hosting companies. We ensure that all processors adhere to strong data protection standards and are contractually obligated to process your personal data securely and only as instructed by Florist Wandsworth. We do not sell or rent your data to third parties.

We may also share your data when required by law, such as in response to a court order or regulatory request, but only to the extent necessary and permitted by law.

How We Protect Your Data

Your privacy and security are important to us. Florist Wandsworth implements appropriate technical and organisational security measures to prevent unauthorised access, disclosure, alteration, or destruction of your personal data. These include:

• Encrypted connections (SSL/TLS) for our website.
• Restricted access to personal data within our organisation.
• Regular data security reviews and staff training.

Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request details of the personal data we hold about you.
• Right to Rectification: You can ask us to correct incorrect or incomplete personal information.
• Right to Erasure: You have the right to request deletion of your data in certain circumstances ("right to be forgotten").
• Right to Restriction: You may request that we limit how we use your data.
• Right to Data Portability: You can request that your data be provided in a structured, machine-readable format or sent to another service at your direction.
• Right to Object: You can object to processing of your data where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time without affecting prior processing.
• Right to Lodge a Complaint: You can complain to your local data protection authority if you feel your rights have been infringed.

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure that suitable safeguards are in place to protect your information in accordance with GDPR requirements.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or our business operations. The latest version will always be available on our website. We encourage you to review this policy periodically for any updates.

Contact and Further Information

If you have any questions about this Privacy Policy or your personal data, please get in touch with us through our website. We are committed to responding promptly to your requests and concerns regarding your privacy.