Privacy Policy for Customers of Florist Lower Clapton

Introduction

This Privacy Policy sets out how Florist Lower Clapton ("we", "us", "our") collects, uses, stores, and protects your personal information as required under the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Florist Lower Clapton from Lower Clapton and surrounding districts.

What Personal Data We Collect

When you place an order with Florist Lower Clapton, we may collect the following categories of information:

• Identity Data: such as your name, and the name of the recipient if different.
• Contact Data: including delivery address, billing address, and contact telephone numbers.
• Order Data: including order details such as flower selection, messages for gift cards, delivery instructions, and purchase history.
• Payment Data: payment method and transaction information (note: we do not process or store complete credit/debit card details; these are handled securely by our payment processors).
• Communication Data: records of communications with us, such as inquiries or feedback.
• Technical Data: such as IP addresses, browser type, and device information (when using our website).

Lawful Basis for Processing

We process your personal information on one or more of the following lawful bases, as set out in the GDPR:

• Contractual Necessity: Processing is necessary to fulfil your order and provide services as agreed.
• Legal Obligation: We may be required to process certain data to comply with relevant laws (e.g., tax, accounting, anti-fraud).
• Legitimate Interests: We may process data as necessary for our legitimate business interests, for example, improving our services or managing our relationship with customers, provided these interests do not override your rights.
• Consent: Where required, such as for certain marketing communications, we will only process your data if you have given clear consent, which you may withdraw at any time.

How We Use Your Personal Data

We use your personal information for the following purposes:

• To process and deliver your orders, including confirming and dispatching your purchase and communicating order status.
• To manage payments and prevent fraudulent transactions.
• To communicate with you regarding your orders or respond to your queries.
• To improve our services and customer experience based on feedback and usage patterns.
• To comply with legal and regulatory obligations.
• To send you marketing communications if you have opted in to receive them.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Generally, we keep records of orders and related personal data for a period of six years to comply with tax and accounting obligations. If you request your data to be deleted where there is no overriding legal requirement to retain it, we will remove your personal information upon verifying your identity and request.

Data Processors and Third Parties

Florist Lower Clapton engages with certain trusted third-party service providers (data processors) to assist in processing your personal data securely and lawfully. This may include:

• Payment processing companies for secure transaction handling.
• Delivery partners or courier services for order fulfilment.
• IT support and hosting companies for secure storage of data.
• Marketing service providers for communications (only where you have opted in).

All processors acting on our behalf are contractually obliged to process your data in accordance with this privacy policy and GDPR.

We do not sell, rent, or share your personal information with other third parties unless required by law, or with your explicit consent.

Data Security

We have implemented appropriate technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include physical security at our premises, staff training, secure online systems, and encryption of data in transit and at rest where feasible.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request access to your personal data held by us.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data, subject to certain exceptions (such as legal retention obligations).
• Right to Restrict Processing: You may request a temporary halt to data processing in specific circumstances.
• Right to Data Portability: You may request a copy of your data in a commonly used, machine-readable format.
• Right to Object: You may object to the processing of your data in certain instances (e.g., direct marketing).
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the contact options made available on our website or in our premises. Requests are free of charge unless clearly unfounded or excessive.

Updates to This Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. The most current version will always be available at our main business premises and website. We recommend checking this policy periodically for updates. Significant changes will be communicated as appropriate to our customers.

Contact and Complaints

If you have any questions regarding this Privacy Policy or how your information is processed, please use the available contact channels on our website or visit our shop in Lower Clapton. You also have the right to lodge a complaint with the UK Data Protection Authority if you are dissatisfied with how we handle your personal data.

This policy was last updated on: 12 June 2024.