Privacy Policy for Customers of Florist New Addington

Privacy Policy Statement

Florist New Addington is committed to safeguarding your privacy and ensuring that your personal data is protected in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and UK data protection legislation. This Privacy Policy explains how we collect, use, store, and process your information when you place orders with Florist New Addington. It applies to all customers placing orders from New Addington and surrounding districts.

What Data We Collect

When you place an order or interact with Florist New Addington, we may collect and process the following categories of personal data:

  • Identity Data: such as your full name and, if required, the recipient’s name.
  • Contact Data: including your billing address, delivery address, and contact details (for example, telephone number).
  • Order Data: details about the products and services you have ordered from us.
  • Payment Data: payment method and transaction details (note: we do not store your full payment card information).
  • Correspondence: records of your communications with us, including order instructions or delivery notes.
  • Technical Data: such as IP address, browser type, and cookies if you use our website.

Lawful Basis for Processing Your Data

Under the GDPR, we are required to inform you of the lawful basis we rely on to process your personal data. Florist New Addington processes your personal information on one or more of the following grounds:

  • Contractual Necessity: To fulfil our service to you by processing, delivering, and invoicing your order. Without this information, we could not process your request or deliver your order effectively.
  • Legal Obligation: To comply with applicable laws relating to tax, accounting, or fraud prevention.
  • Legitimate Interests: For everyday business purposes, such as improving our products and services or preventing fraudulent activities, provided these interests are not overridden by your rights and interests.
  • Consent: For direct marketing or other non-essential purposes, where required. Where we rely on your consent, you are free to withdraw it at any time.

How We Use Your Data

Florist New Addington will only process your personal data for the specific purposes for which it was collected. These purposes include:

  • Processing and fulfilling your orders, including communicating order updates.
  • Managing payments and refunds.
  • Contacting you regarding delivery arrangements or order issues.
  • Complying with our legal and regulatory obligations.
  • Improving our services and customer experience.
  • Sending you direct marketing about our products or offers, only where you have agreed or where allowed by law.

How We Share and Disclose Your Data

We do not sell your personal information. However, we may disclose your data to the following categories of recipients, exclusively when necessary and in compliance with data protection law:

  • Service Providers and Data Processors: Trusted third-party partners that support us in delivering our services, such as payment processors, IT providers, or delivery services.
  • Legal Authorities: Where disclosure is required by law or to protect our rights, property, or safety.

Any third-party data processors we engage are bound to maintain the security and confidentiality of your information and may only process personal data under our instructions.

Data Storage, Security, and Retention

We implement appropriate technical and organisational measures to safeguard your personal data against accidental loss, misuse, unauthorised access, or disclosure. Access to your personal data is restricted to employees, agents, contractors, and other third parties who have a business need to know for the purposes outlined in this policy.

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order and transaction records are retained for a minimum of six years in compliance with legal obligations.

Your Rights Under GDPR

As a data subject, you have the following rights regarding the personal data we hold about you, subject to certain legal conditions and exemptions:

  • The right to access – You have the right to request a copy of the personal data we hold about you, along with information about how and why it is processed.
  • The right to rectify – If any data we hold about you is inaccurate or incomplete, you have the right to request correction.
  • The right to erase – You may request the deletion of personal data where there is no compelling reason for its continued processing.
  • The right to restrict processing – You can ask us to temporarily stop processing your personal data under certain circumstances.
  • The right to object – You have the right to object to processing where we rely on legitimate interests or direct marketing.
  • The right to data portability – Where applicable, you can request that your personal data be transferred to another service provider in a structured, commonly used, and machine-readable format.
  • The right to withdraw consent – Where we rely on your consent to process your data, you may withdraw this consent at any time.

To exercise your rights, please contact us using the details provided in the contact section on our website or by visiting our store. We will respond to all legitimate requests within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are dissatisfied with how we have handled your data.

Policy Updates

We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically for the latest information on our privacy practices. All changes will take effect upon posting the revised policy on our website.

Contacting Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we process your personal data, please contact us through the contact details available on our website or visit us at Florist New Addington.

This Privacy Policy was last updated in June 2024.