Our Commitment to Your Privacy at Florist Chislehurst
Introduction
This Privacy Policy explains how Florist Chislehurst collects, uses, stores, and protects your personal data when you place an order with us, whether directly or via our website, as a resident or customer in Chislehurst and surrounding districts. Protecting your personal information and respecting your privacy rights is fundamental to our approach, and we are committed to complying with the General Data Protection Regulation (GDPR).
Who Does This Policy Apply To?
This Privacy Policy applies to all individuals who interact with Florist Chislehurst to place orders, request information, or otherwise use our services in Chislehurst and the surrounding districts. If you are ordering flowers, gifts, or related items through our business, this policy is relevant to you.
What Personal Data Do We Collect?
Florist Chislehurst may collect the following categories of personal data when you place an order or interact with us:
- Contact Information: Including your name, address, delivery address (if different), and phone number.
- Order Details: The items you order, delivery instructions, and any specific requests.
- Payment Information: Details required to process your payment, such as card type and payment confirmation. (Please note that full card details are never stored by us after processing.)
- Communications Data: Any correspondence or communications (such as queries, feedback, or support messages).
- Technical Data: If you use our website, we may collect information such as your IP address, browser type, and cookies, solely for analytical and functional purposes.
Lawful Basis for Processing Personal Data
Under the GDPR, we are only permitted to use your personal data if we have a lawful basis for doing so. For Florist Chislehurst, this includes:
- Performance of a Contract: Most commonly, to fulfil and deliver your order, and to contact you about your purchase.
- Legal Obligations: To comply with regulations such as maintaining transaction records for tax purposes.
- Legitimate Interests: To improve our products and services or to handle any enquiries, provided this does not override your fundamental rights and interests.
- Consent: For certain types of communication (e.g., marketing), we will seek your explicit consent, and you can withdraw this at any time.
How We Use Your Information
We use your personal data primarily to process and deliver your orders efficiently and to provide customer service. In detail, we may use your information to:
- Confirm and process your order
- Arrange and manage delivery logistics
- Communicate with you regarding your order status or any requested changes
- Respond to your enquiries or handle your feedback
- Comply with legal and accounting obligations
- Improve our products and services through anonymised data analytics
Data Retention: How Long Do We Keep Your Data?
We retain your personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required by law. In general:
- Order Data and Communications: Retained for up to 7 years to comply with legal and accounting regulations.
- Payment Information: Not stored beyond the transaction, except for records necessary for accounting purposes.
- Marketing Preferences: Retained only while you remain opted-in and deleted upon withdrawal of consent.
Data Sharing and Processors
Your personal data is processed by Florist Chislehurst staff for the purposes outlined above. Additionally, we may share your information with the following types of data processors:
- Payment Processors: Secure third-party services who facilitate payment and refunds for your orders.
- IT and Software Providers: Companies that provide web hosting, order management, and technical support to maintain our systems.
- Delivery Partners: Where necessary, information is shared with trusted couriers or drivers to ensure your order reaches the correct address.
- Auditors and Regulatory Authorities: To comply with legal or regulatory requests.
We ensure all third parties who process your data on our behalf do so under strict contractual obligations to protect your information and comply with GDPR.
Your Data Protection Rights
Under the GDPR, you have the following rights concerning your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request correction of any inaccurate or incomplete information.
- Erasure: You may request deletion of your personal data where there is no continued reason for us to retain it.
- Restriction: You may request limited processing of your data in certain circumstances.
- Objection: You may object to certain processing activities or to direct marketing at any time.
- Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
If you wish to exercise any of these rights, please contact us using the contact options on our website or the communication methods you used to place your order. To protect your privacy, we may request specific information to verify your identity.
Data Security
We have implemented suitable security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. This includes encryption, secure order processing, restricted access, and regular training of our staff on data protection principles.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our legal obligations or business practices. The latest version will always be available on our website, and any significant changes will be brought to your attention where appropriate.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us via the contact form or postal address listed on our website. We are fully committed to resolving any issues and safeguarding your privacy.
