Florist Deptford Privacy Commitment

Introduction

At Florist Deptford, your privacy and the security of your personal data are of utmost importance to us. This Privacy Policy explains how we collect, use, share, retain, and protect your information when you place an order with Florist Deptford from Deptford and its surrounding districts. The policy reflects our commitment to ensuring compliance with the General Data Protection Regulation (GDPR), and addresses your legal rights in relation to your data.

Scope of the Policy

This policy applies to all individuals who interact with Florist Deptford as customers, specifically those placing floral orders in Deptford as well as in neighbouring districts. It covers the handling of personally identifiable data collected through any of our ordering processes, whether you order online, by phone, or in person.

What Data We Collect

When you place an order with Florist Deptford, we collect and process the following categories of personal data as necessary for processing your request and providing our services:

• Contact Information: Name, delivery address, billing address, and contact numbers.
• Order Details: Recipient's name, recipient's address, preferred delivery date, and message to recipient.
• Payment Information: Payment card details or other payment details as needed to complete transactions (handled securely by payment processors).
• Communication Records: Correspondence records resulting from queries, feedback, or support interactions.
• Technical Information: IP address, browser type, and other technical identifiers if you use our website (collected via necessary cookies).

Lawful Basis for Processing

Our processing of your personal data is founded on the following lawful bases as outlined in Article 6 of the GDPR:

• Contractual Obligation: Most information is processed to fulfill your order and deliver the products you request.
• Legal Obligation: We may be required to retain and disclose data to comply with our legal and regulatory responsibilities (e.g., record-keeping for accounting purposes).
• Legitimate Interests: Some information is processed to improve our services, respond to queries, or prevent fraud, where such processing does not override your fundamental rights and freedoms.
• Consent: For any direct marketing communications, we seek your explicit consent before sending such materials, and you have the right to withdraw it at any time.

How We Use Your Data

Personal information collected is used strictly for the following purposes:

• To process, fulfill, and deliver your floral orders.
• To communicate order updates, respond to enquiries, and provide customer support.
• To facilitate secure payment processing through trusted payment service providers.
• To meet our statutory obligations, including tax and accounting record-keeping.
• To improve our services through analysis of ordering trends and customer feedback.

Your data is never sold or indiscriminately shared with unrelated third parties.

Data Retention

We retain customer data only as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, order data and associated communication records are retained for up to seven years, aligning with accounting and audit obligations. Technical data and cookies are retained for a limited period consistent with the purpose for which they are used.

Once data is no longer required, it is securely deleted or rendered anonymous so that identification is no longer possible.

Processors and Data Sharing

Florist Deptford works with trusted third-party processors to provide services essential to fulfilling your order. These include:

• Payment Processors: Accredited providers responsible for securely handling your payment details.
• IT Service Providers: Providers hosting and maintaining our ordering platforms and secure databases.
• Delivery Partners: Where necessary, third-party couriers facilitating the delivery of your orders.

All processors are rigorously vetted, bound by data processing agreements, and required to comply with strict confidentiality and data protection standards. Data sharing with these third parties is limited to the minimum necessary for them to perform their contractual obligations for us.

We do not transfer your personal data outside the UK or European Economic Area unless sufficient safeguards, as required by GDPR, are in place.

Your Rights Under GDPR

As a customer, you have the following rights with respect to your personal data under the GDPR:

• Right of Access: You can request confirmation of whether we process your data and receive a copy of your personal information.
• Right to Rectification: You may request correction of inaccurate or incomplete data we hold about you.
• Right to Erasure: In certain circumstances, you may request we delete your personal data.
• Right to Restrict Processing: You can ask us to limit processing if you contest the accuracy or legality of processing.
• Right to Object: You can object to certain types of processing, such as marketing communications or processing based on legitimate interests.
• Right to Data Portability: Where processing is automated and based on consent or contract, you may request a copy of your data in a portable format.
• Right to Withdraw Consent: You can withdraw consent to marketing or other activities where consent was previously given.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data is not being processed in compliance with the law.

To exercise any of these rights or for more information about your data, please contact us using the details provided on our main website or in-store.

Keeping Data Secure

We implement physical, technical, and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. Only trained staff and authorised agents involved in processing your order have access to your data. Our processes and security measures are regularly reviewed to ensure ongoing compliance with our obligations under the GDPR.

Policy Updates

This Privacy Policy is reviewed on a regular basis and may be updated from time to time to reflect changes in our processing practices or legal requirements. Customers are encouraged to review this policy periodically for the latest information about how we process and protect your personal data. Substantial changes, if any, will be communicated through our usual channels.

Contact Us

If you have any questions, comments, or wishes to exercise your rights regarding your personal data, please reach out to us through the contact options found on our website or in-store. We are committed to resolving any concerns promptly and transparently.