Florist Walthamstow Privacy Policy

Introduction

This Privacy Policy explains how Florist Walthamstow (“we”, “us”, “our”) collects, uses, stores, and protects personal data relating to customers placing orders from Walthamstow and its surrounding districts. The Policy is designed to comply with the UK General Data Protection Regulation (GDPR) and provides clarity on your rights as a data subject. By engaging with our services or placing an order, you agree to the practices detailed below.

Scope of This Privacy Policy

This policy applies to all individuals who place orders with Florist Walthamstow, whether via our website, telephone, or in person, from Walthamstow and neighbouring districts. It covers all aspects of personal data processing arising from the purchase and delivery of our floral arrangements and related services.

What Personal Data We Collect

We collect and process a variety of personal data to facilitate your order and improve our services. The data we may collect includes:

• Identification Data: Full name, title, and contact details (such as address, phone number, and, where provided, email address).
• Recipient Data: Name, address, and any message you request to be included with your order.
• Order Information: Order details, delivery date and time preferences, and any card message or special instructions you provide.
• Payment Data: Details associated with payment (e.g., a payment confirmation or reference code as provided by our payment processors). We do not store your full card details.
• Technical Data: IP address, browser type, device information, and related analytical data to help us enhance our digital platforms.

Lawful Basis for Processing Your Data

We process your personal data under the following lawful bases as defined by the GDPR:

• Contractual necessity: To fulfil the contract of sale entered into when you place an order. This includes order processing, payment, delivery, and communication regarding your purchase.
• Legitimate interests: To improve our products, services, and customer experience, and for reporting and analytics purposes (only where such interests are not overridden by your rights).
• Legal obligations: To comply with applicable laws, such as record-keeping for tax and accounting purposes.
• Consent: With your permission, for activities such as marketing communications. You may withdraw consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing and fulfilling your floral and gift orders, including communicating order updates and handling delivery logistics.
• Managing payment transactions securely via authorised third-party payment processors.
• Providing customer support and responding to queries or complaints you may make.
• Enhancing our website, service offerings, and overall customer experience through analysis of anonymised data trends.
• Complying with legal, accounting, or regulatory requirements.
• With your explicit consent, contacting you with information about promotions or new products that may be of interest.

Data Processors and Third Parties

To provide an efficient service, we sometimes share necessary data with carefully selected third parties (data processors) acting on our instructions. These include:

• Delivery Partners: Couriers or delivery services to ensure timely arrival of your orders.
• Payment Service Providers: Secure payment gateways for processing online or in-store payments. We do not see or store your full payment details.
• IT and System Support Providers: Companies that assist with maintaining our website, databases, and communication tools.

All processors must meet stringent data protection standards as required by GDPR. We do not sell or share your personal data for marketing purposes with other businesses.

Data Retention Periods

Personal data is retained only as long as necessary to fulfil the purposes described above, or as required to satisfy legal, accounting, or reporting requirements. In general:

• Order and transaction information is kept for up to seven years to comply with tax and financial regulations.
• Customer service correspondence is retained for up to two years after your last interaction with us.
• Marketing consent records are maintained until you unsubscribe or withdraw consent.
• Technical and analytical data is either anonymised or removed within 24 months.

Your Rights Under GDPR

As a data subject, you enjoy several rights relating to the processing of your personal data:

• Right of access: You may request a copy of your personal data held by us.
• Right to rectification: You can ask us to correct any incomplete or inaccurate details.
• Right to erasure (“right to be forgotten”): You can request deletion of your data in certain circumstances.
• Right to restrict processing: You can ask for processing to be restricted while a complaint is investigated.
• Right to data portability: Where applicable, you can request transfer of your data to another organisation.
• Right to object: You have the right to object to processing conducted under our legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, you may contact us via the methods provided on our website or in store. We will respond to all legitimate requests in accordance with data protection law.

Data Security

We use industry-standard technical and organisational measures to protect your data from unauthorised access, loss, misuse, alteration or disclosure. These measures include secure storage systems, staff training, limited access controls, and regular data audits.

Updates to This Policy

This Privacy Policy may be revised from time to time. Any changes will be reflected on our website and are effective immediately upon posting. Please revisit this page regularly to stay informed of any updates.

Contact and Concerns

If you have questions about this Privacy Policy or how Florist Walthamstow processes your personal data, please contact us using the details provided on our website or visit us in store. If you feel dissatisfied with our processing of your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).