Florist South Hornchurch GDPR Privacy Policy
Introduction
This Privacy Policy explains how Florist South Hornchurch ("we", "us", or "our") collects, uses, stores, and protects your personal data when you place orders with us from South Hornchurch and the surrounding districts. We are committed to ensuring transparency in our data handling practices in full compliance with the General Data Protection Regulation (GDPR) and relevant United Kingdom data protection laws.
Scope of This Policy
This policy applies to all customers who use Florist South Hornchurch services and place orders either online, by telephone, or in person for deliveries within South Hornchurch and adjacent areas. By providing us with your personal information and using our services, you acknowledge and agree to the terms outlined in this Privacy Policy.
Data We Collect
To fulfil your orders and provide a seamless customer experience, we collect and process the following categories of personal data:
- Identity Information: Your full name, and for delivery purposes, names of recipients.
- Contact Information: Delivery addresses, billing addresses, phone numbers, and other relevant contact details.
- Order Details: Information about your flower order, card messages, delivery instructions, and purchase history.
- Payment Information: Card payment or other transaction details (processed securely via compliant payment processors; we do not store full card numbers).
- Communication Data: Correspondence between you and us, including complaints, queries, and feedback.
- Technical Data: IP address, browser type, and device information, collected through website usage (for online orders).
Lawful Bases for Processing
Under the GDPR, we must have valid lawful bases to process your personal data. Florist South Hornchurch relies on the following lawful grounds:
- Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., fulfilling and delivering your order).
- Legal Obligation: Compliance with legal obligations, such as record-keeping required by law.
- Legitimate Interests: For improving our services, ensuring security, and responding to queries or concerns, providing these interests are not overridden by your rights.
- Consent: Where required, such as when signing up for marketing communications, we will seek your explicit consent. You can withdraw consent at any time.
How We Use Your Information
We use your personal data solely for the following purposes:
- Processing your order and arranging delivery of floral products and accompanying items.
- Communicating with you about your orders, including confirmation and updates.
- Processing payments securely through authorised payment providers.
- Responding to your questions and resolving issues or complaints.
- Keeping appropriate records for accounting, tax, and regulatory compliance.
- Improving and personalising our services, where applicable.
- With your consent, sending you relevant marketing communications (you may opt out at any time).
Data Retention
We keep your personal data for as long as is necessary to fulfil the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements. Generally:
- Order and transaction records are retained for six years after completion to fulfil statutory requirements.
- Contact details used for marketing purposes are held until you withdraw consent or opt out, whichever comes first.
- Technical and analytics data is retained for up to two years to support website performance improvements.
- When data is no longer required, it is securely deleted or anonymised.
Data Processors and Sharing
We may share your data with trusted third-party processors who provide necessary services on our behalf, such as:
- Payment processing providers
- Technology and IT support partners
- Delivery couriers or networks
- Professional advisors (e.g., accountants, legal advisors), where required
All third-party processors are contractually bound to safeguard your data, act only on our instructions, and comply with GDPR requirements. We do not sell or rent your personal data to any third parties. Your data is never transferred outside the United Kingdom or European Economic Area unless appropriate safeguards and protections are in place.
User Rights
As a customer under the GDPR, you have the following rights regarding your personal information:
- Right of Access: You may request access to your personal data we hold, and receive a copy of this information.
- Right to Rectification: You can ask for corrections to incomplete or inaccurate information.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data when lawful grounds apply.
- Right to Object: You can object to processing based on legitimate interests or opt out of direct marketing at any time.
- Right to Restrict Processing: You may ask us to restrict processing under certain circumstances.
- Right to Data Portability: Where applicable, you can request that we transfer your data to another service provider.
- Right to Withdraw Consent: Where consent has been given, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
We will respond to all legitimate requests relating to your rights under GDPR and strive to resolve any concerns in a timely manner.
How We Protect Your Data
Florist South Hornchurch takes the security of your data seriously. We use technical and organisational measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal information. This includes secure data storage, restricted access, staff training, and encryption technologies where relevant.
Updates to This Privacy Policy
We may update this Privacy Policy as required to comply with legal obligations or to reflect changes in our practices. We encourage you to review this policy periodically for the latest information concerning our privacy practices. The most current version will always detail the date of the latest revision.
Contact and Concerns
If you have any questions, requests, or concerns regarding your personal data or this Privacy Policy, you may contact us through our physical address or in person at our South Hornchurch shop. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been infringed.