West Norwood Florist Privacy Policy

Introduction

At West Norwood Florist, we are dedicated to safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers who place orders with West Norwood Florist, whether in West Norwood or the surrounding districts. By using our services, you are accepting the practices described in this policy.

What Data We Collect

To ensure an efficient ordering and delivery process, we may collect the following categories of personal data from customers:

• Contact Information: Such as your full name, delivery address, billing address, and phone number.
• Order Details: Including items ordered, delivery instructions, the occasion, and any personalised card messages you provide.
• Payment Information: Payment method and transaction details (note: we do not directly store your card numbers, as payments are handled securely by payment processors).
• Communications: Emails or communications you send to us regarding orders, queries, or complaints.
• Technical Data: Such as your IP address, browser type, device used, and cookies if you interact with our website.

Lawful Basis for Processing Your Data

We process your personal information only where we have a lawful basis for doing so under GDPR. The principal lawful bases are:

• Performance of a Contract: To fulfil your floristry order, process payments, and arrange delivery.
• Legal Obligation: To comply with relevant laws (such as tax or bookkeeping regulations).
• Legitimate Interests: To improve our products and services, prevent fraud, and communicate service-related updates to you, provided these interests do not override your rights and freedoms.
• Consent: For any processing not covered by the above (such as sending marketing communications), we request your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal information is used for the following specific purposes:

• To process and fulfil your floristry order, including communication about your order status and delivery.
• To manage payment and invoicing for your purchases.
• To respond to your queries, requests, or complaints.
• To maintain records for accounting and legal compliance.
• With your consent, to send occasional information about our products, offers, or updates.

Data Retention

West Norwood Florist retains your personal data only as long as necessary for the purposes it was collected, outlined below:

• Order and Account Data: Order details and basic account information are usually kept for up to six years to comply with legal and accounting requirements.
• Marketing Preferences: If you opt in to receive marketing, your contact data will be kept until you withdraw your consent.
• Technical Data: Cookies and analytics data are retained according to our internal cookie policy but generally for no longer than two years.

After these periods, data will be securely deleted or anonymised.

Third Parties and Data Processors

We work with carefully selected third parties to help us provide and improve our service. These include:

• Payment Processors: Secure handling of transactions; we do not store your card details.
• Delivery Partners: To fulfil and deliver your orders to the specified address.
• IT and Software Providers: For the hosting, maintenance, and support of our website and order systems.
• Accountants and Legal Advisors: For compliance and auditing where necessary.

All such processors operate under a binding contract that upholds the confidentiality and security of your data. We do not sell or rent your personal data to any third parties for marketing purposes. If required by law, we may share personal information with authorities.

International Transfers

Your personal data is normally stored within the United Kingdom or the European Economic Area (EEA). If data is transferred outside these areas, we ensure that appropriate safeguards are in place as required by GDPR, such as standard contractual clauses or equivalent protection.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure: Request deletion of your personal data (subject to legal obligations).
• Right to Restrict Processing: Request us to limit processing in certain circumstances.
• Right to Data Portability: Receive your personal data in a machine-readable format or have it transmitted to another controller.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where consent is the basis, you may withdraw your consent at any time.

To exercise your rights, please contact our data protection representative via the contact details on our website or at our physical store. We will respond to all requests within one month, as required by law.

Data Security

We implement suitable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, destruction, misuse, or disclosure. These measures are regularly reviewed and updated as necessary.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes to our practices or regulations. The latest version will always be available on request or at our point of sale. Please review periodically for updates.

Contact and Concerns

If you have questions, concerns, or wish to exercise your data rights, please reach out using the contact information provided on our website or at our premises. If you believe we have not addressed your concern appropriately, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Scope of This Policy

This Privacy Policy applies to all customers ordering from West Norwood Florist in West Norwood and the surrounding districts, whether in person, via telephone, or through our website. By placing an order, you acknowledge that you have read, understood, and agree to the practices described in this policy.