Florist Eastcote Privacy Policy

Introduction

This Privacy Policy sets out how Florist Eastcote collects, uses, shares, and safeguards your personal information in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Eastcote in Eastcote and the surrounding districts.

What Data We Collect

When you place an order or contact Florist Eastcote, we may collect the following categories of personal data:

• Contact Details: Name, delivery address, billing address, and postal codes.
• Order Information: Details of products or services ordered, delivery instructions, and gift messages.
• Payment Information: Limited payment data such as payment method or transaction confirmation (we do not store full credit/debit card numbers).
• Communication Data: Any correspondence by phone, web form, or post relating to your order or queries.
• Website Usage Data: Technical data (such as IP address, browser type and version) and data on your interactions with our website (where applicable).

We do not intentionally collect special categories of personal data (e.g. health, ethnicity, religious beliefs) from our customers. Please refrain from including such information in your order notes or communications.

Our Lawful Basis for Processing

Florist Eastcote processes your personal data using the following lawful bases outlined in the GDPR:

• Contractual Necessity: We use your information to process and fulfil your orders, provide customer service, and deliver products as agreed in our contract with you.
• Legal Obligation: We retain certain information to comply with legal obligations, such as accounting, tax, and record-keeping requirements.
• Legitimate Interests: We may process your data to improve our products and services, prevent fraud, and manage our business operations. We take care to balance our legitimate interests with your rights and freedoms.
• Consent: If we wish to send you marketing communications, we will request your explicit consent before doing so. You have the right to withdraw your consent at any time.

How We Use Your Data

Florist Eastcote uses personal data for the following purposes:

• Processing and delivering your floral orders.
• Contacting you regarding your current order or responding to your enquiries.
• Internal record-keeping, accounting, and compliance with legal requirements.
• Improving our products, services, and customer experience.
• Where you have given consent, notifying you of offers and updates relevant to Florist Eastcote (with the option to unsubscribe).

How Long We Keep Your Data

We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Typically, your order and contact data are held for up to seven years to satisfy accounting and legal requirements, after which it will be securely deleted or anonymised. If you have provided consent for marketing emails, your contact details will be retained until you withdraw your consent or request deletion.

Who Processes Your Data (Processors and Sharing)

For the purposes described above, your personal data may be handled by the following categories of recipients and data processors, strictly under contract and according to GDPR:

• Internal Staff: Florist Eastcote team members involved in fulfilling your order and customer service.
• Delivery Partners: Trusted carriers or local delivery drivers contracted to deliver your flowers.
• IT and Payment Providers: Third-party services who provide secure website hosting, payment processing platforms, or accounting software. We ensure they comply with GDPR and only process data as instructed by us.
• Legal and Regulatory Authorities: When required, we may share information with authorities to comply with legal obligations.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes. Your data is never transferred outside the UK or European Economic Area unless adequate protections are in place as required by law.

How We Protect Your Data

Florist Eastcote takes the security and confidentiality of your data very seriously. We use appropriate technical and organisational measures to protect your information from unauthorised access, misuse, loss or destruction. These measures include computer safeguards, physical security, and secure data disposal methods.

Your Rights as a Data Subject

Under the GDPR, you have several rights in relation to your personal data held by Florist Eastcote. These include:

• The right to access – Request details and a copy of the personal data we hold about you.
• The right to rectification – Ask us to amend or correct inaccurate data.
• The right to erasure – Request deletion of your personal data, subject to legal retention requirements.
• The right to restrict processing – Ask us to limit the way we use your data in certain circumstances.
• The right to data portability – Obtain and reuse your data across different services.
• The right to object – Object to certain types of processing, such as marketing.
• The right to withdraw consent – Withdraw your consent to marketing or other processing based on consent at any time.
• The right to lodge a complaint – Raise a concern with the UK’s Information Commissioner’s Office (ICO) if you believe your data is being misused.

To exercise your rights, please contact us using the appropriate channels set out on our website or in-store. We endeavour to respond to all legitimate requests within one month.

Changes to This Policy

We may update or amend this Privacy Policy from time to time to reflect changes in the law or our data practices. The latest version will always be published on our website and is effective upon posting. We encourage you to review this policy whenever you place an order or use our services.

Contact and Further Information

If you have any questions or concerns regarding how Florist Eastcote handles your personal information, please contact us via the contact details set out on our website or enquire in-store. We are committed to upholding your privacy and protecting your data at all times.