Florist Erith Privacy Policy for Customers

Introduction

At Florist Erith, we are dedicated to respecting your privacy and safeguarding your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Florist Erith from Erith and surrounding districts.

What Personal Data We Collect

Florist Erith collects and processes personal data necessary for the fulfilment of your floral orders and to enhance your customer experience. The types of data we may collect include:

• Identity Data: Such as your name, and, where relevant, the recipient's name.
• Contact Data: Address, delivery address, and phone number (if given).
• Order Information: Details relating to your floral order, including product selection, delivery preferences, and notes for the recipient.
• Payment Data: Transaction details such as payment confirmation numbers (note: we do not store full credit/debit card details).
• Technical Data: IP address, browser type, and device information, collected via cookies for website operation and security purposes.
• Correspondence: Records of your communication with us regarding any queries or issues.

The Purpose and Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so under GDPR. The main purposes and corresponding lawful bases include:

• Contract: Processing your order, arranging delivery, and providing customer support rely on the necessity of fulfilling our contract with you.
• Legal Obligation: Retaining transaction records for tax, fraud prevention, and accounting purposes.
• Legitimate Interests: Using basic information to improve our products and services, providing relevant updates about your order, and operating our website securely.
• Consent: If you have chosen to receive marketing communications, we rely on your consent, and you can withdraw this at any time.

Data Retention

Florist Erith retains personal data for only as long as is necessary for the purposes described within this policy. Our retention periods are:

• Order Data: Kept for up to seven years to comply with legal and accounting regulations.
• Correspondence: Retained for up to 24 months for quality control and to resolve any issues.
• Marketing Data: Retained until you withdraw consent or unsubscribe from communications.

Once the retention period elapses or the data is no longer required, your personal information will be securely deleted or anonymised.

Use of Data Processors

To effectively provide our services, Florist Erith may engage third-party processors who process personal data on our behalf. These include:

• Payment Service Providers: To process your transactions securely.
• Delivery Partners: To deliver your floral orders to the specified address.
• IT Service Providers: For maintaining our website, processing orders, and providing data security.

All third-party processors acting on our behalf are contractually obligated to handle your data in accordance with GDPR, maintain its confidentiality, and use it only as instructed by Florist Erith.

Sharing of Your Information

Your personal data is only shared with processors and partners as strictly necessary for order fulfilment and business operations described in this policy. We do not sell or rent your personal information to any third parties.

We may be required to disclose personal data under statutory or regulatory obligations or if necessary for the establishment, exercise, or defence of legal claims.

International Data Transfers

Florist Erith generally stores and processes your data within the UK or European Economic Area (EEA). On occasion where data may be processed outside of these territories, we ensure appropriate safeguards are in place as required by GDPR, such as standard contractual clauses or adequacy decisions.

Your Rights Under GDPR

As a customer of Florist Erith, you have the following rights concerning your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data, subject to any retention obligations.
• Right to Restriction: You can ask us to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Where technically feasible, you can request that we provide your data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your data for direct marketing or on grounds relating to your specific situation.
• Rights Related to Automated Decision-Making: Florist Erith does not conduct automated decision-making or profiling using your personal data.
• Right to Withdraw Consent: If we process your data based on your consent, you can withdraw this at any time for future processing.

To exercise your rights, please contact us using our website’s contact options. We may require proof of your identity to ensure data security when fulfilling your request.

Security of Your Personal Information

We take the security of your data seriously and have implemented appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse. These measures are regularly reviewed to uphold the confidentiality and integrity of your information.

Updates to This Privacy Policy

This Privacy Policy may be updated from time to time in line with changes to data protection laws or our business processes. The revised policy will be posted on our website with the latest effective date. We encourage you to review this page periodically for the latest information on our privacy practices.

Contact Us

If you have questions, concerns, or wish to exercise your rights regarding your personal data, please use the contact form provided on our website. We will respond to your enquiry within the timeframes specified by GDPR.

This policy is effective as of June 2024.