Florist Elmers End Privacy Policy for Customers

Introduction

This Privacy Policy explains how Florist Elmers End manages and protects the personal data of our customers. It applies to all individuals placing orders with Florist Elmers End, whether located in Elmers End or the surrounding districts. We are deeply committed to complying with the General Data Protection Regulation (GDPR) and safeguarding your privacy whenever you interact with us.

What Data We Collect

When you place an order with us, whether online, by phone, or in-store, we collect certain personal information to process your request and deliver our services effectively. The types of data we collect may include:

• Personal Identification: Name, address, and contact details of customers and recipients (such as telephone number or delivery address).
• Order Details: Product selections, preferences, messages for recipients, requested delivery dates and times.
• Payment Information: Payment card data or transaction information; note that full card details are typically handled via our payment processor and not stored by us.
• Communication Records: Correspondence with our team, including order confirmations, queries, feedback and complaints.
• Technical Information: When using our website, basic technical data such as IP address, browser type, device data, and cookies preferences (where applicable) may be gathered for the permissible functions of the site.

Lawful Basis for Data Processing

In accordance with GDPR, we only process personal data if we have a legally valid reason. The lawful bases we rely on for processing your information as a customer include:

• Contractual Necessity: Most data we process is necessary for fulfilling the contract of sale and delivery of floral orders and related services.
• Legal Obligation: Some data is processed to comply with applicable legal and tax requirements.
• Legitimate Interests: In certain cases, we may process data for our legitimate business interests, provided these interests do not override your fundamental rights (e.g., fraud prevention, internal record keeping, customer service).
• Consent: For direct marketing communications, if applicable, we will seek your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

Your personal data is only used for clear and specific purposes, which may include:

• Processing and delivering your order, including handling payment and fulfilment logistics.
• Providing customer support and responding to your inquiries or feedback.
• Ensuring the accuracy of deliveries, including contacting customers or recipients where necessary.
• Ensuring compliance with legal obligations, such as retaining accounting records.
• Sending service-related updates about your order (such as order confirmation and delivery notifications).
• If you have provided explicit consent, sending you marketing updates or special offers from Florist Elmers End.

How Long We Retain Your Data

We retain your personal data only as long as is necessary to fulfil the purposes for which it was collected, or as required by legal or regulatory obligations. Generally:

• Order data and associated correspondence is retained for up to 6 years to comply with legal and tax requirements and to handle potential product or delivery issues.
• Marketing preferences and consent records are kept until you withdraw consent or request deletion of your information from our records.
• Technical data is retained in accordance with our website's cookie and data retention policy, typically not longer than 2 years.

Once data is no longer required, it is securely deleted or anonymised.

Third-Party Data Processors

Florist Elmers End uses carefully selected third-party suppliers, known as data processors, to support the operation of our business. These processors may handle data on our behalf, strictly in accordance with our instructions and only for the purposes of providing relevant services. Examples include:

• Payment gateway providers for handling secure online and card transactions.
• IT support companies managing our ordering and customer management systems.
• Couriers and delivery service providers for fulfilling floral deliveries within Elmers End and surrounding areas.
• Suppliers of email or text messaging platforms (for order and delivery confirmations).

All processors are contractually obliged to protect your data under GDPR, ensuring strict confidentiality, security, and non-disclosure.

User Rights Under GDPR

As a customer of Florist Elmers End, you have various rights relating to your personal data, including:

• The right of access – You can request a copy of the personal data we hold about you.
• The right to rectification – You may request corrections to any inaccurate or incomplete data.
• The right to erasure – You can request deletion of your data in certain circumstances, for instance where it is no longer needed for processing or you have withdrawn your consent (subject to minimum retention requirements).
• The right to restrict processing – You can ask us to suspend processing of your personal data in certain situations.
• The right to object – You have the right to object to certain types of processing, such as direct marketing.
• The right to data portability – Where applicable, to receive a copy of your data in a commonly used electronic format.

To exercise any of these rights, or if you have questions about how we process your personal data, please contact us using the contact details provided in our store or on your order documentation.

Security of Your Data

We treat the security of your personal data with the highest priority. All systems and data storage solutions are protected with appropriate administrative, physical, and technological measures. Data transmitted online, such as through payment portals, is encrypted and securely managed. Access to your data is restricted to authorised personnel only.

Policy Updates

We may periodically review and update this Privacy Policy to reflect changes in our business, legal requirements, or best practices. Changes will be effective immediately upon posting in our store and on our website. We encourage you to review this policy regularly.

Contact and Complaints

If you would like more information about this Privacy Policy, about your rights, or have concerns about the way Florist Elmers End processes your data, please reach out using our published contact details. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Thank you for placing your trust in Florist Elmers End. We are dedicated to ensuring your privacy and the responsible handling of your personal data every step of the way.