Florist Bexley Privacy Policy
Introduction
At Florist Bexley, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy outlines how we collect, use, store, and process your personal information in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Bexley from Bexley and surrounding districts.
What Data We Collect
When you engage with Florist Bexley, we may collect and process the following categories of personal data:
- Contact Information: Your name, address, phone number, and delivery address if different.
- Order Details: Details of the products you purchase, notes or messages to be included with your order, and delivery instructions.
- Payment Information: Payment-related data such as transaction information. Please note payment card details are processed by our payment processors and are not stored directly by Florist Bexley.
- Communications: Correspondence with us via telephone, SMS, or online forms regarding orders, enquiries, or feedback.
- Technical Information: Cookies, IP addresses, browser types, and usage data collected through our website to ensure functionality and monitor trends. We do not collect sensitive personal data unless voluntarily provided for specific order requirements (for instance, allergy or accessibility information).
Lawful Basis for Data Processing
Florist Bexley processes your personal data under the following lawful bases, as defined by the GDPR:
- Contractual Necessity: To fulfil your orders, process payments, deliver products, and provide customer service.
- Legal Obligations: To comply with UK laws and regulations, such as record-keeping for accounting and tax purposes.
- Legitimate Interests: To operate, improve our services, prevent fraud, and handle customer enquiries, except where your data protection interests override our interests.
- Consent: Where applicable, such as for direct marketing communications, we will obtain your explicit consent.
How We Use Your Data
Your personal data is used for the following purposes:
- To process and deliver your orders accurately.
- To communicate with you regarding your purchases, deliveries, or requested information.
- To improve our website, service, and customer experience.
- To comply with legal requirements and resolve disputes.
- For internal record-keeping and service quality monitoring.
How Long We Keep Your Information (Retention)
Florist Bexley retains your personal data only for as long as necessary to achieve the purposes outlined in this policy, in accordance with applicable legal requirements. Generally, we retain order and customer records for up to six years in line with accounting regulations and legal claims. Data used for marketing purposes will be kept until you withdraw your consent or ask to be removed. Non-essential information is reviewed regularly and securely deleted when no longer needed.
Data Processors and Sharing Information
We may share your personal data with trusted third-party service providers who act as data processors on our behalf. These include:
- Payment processors for securely handling your payments.
- Delivery providers assisting with the dispatch and tracking of your orders.
- IT and web service providers for system maintenance, website hosting, and technical support.
All third-party processors are contractually obligated to protect your data in accordance with GDPR requirements and are only permitted to process data as necessary to provide their services to us. We do not sell your personal data to third parties.
Your Data Rights
As a data subject under the GDPR, you have the following rights regarding your personal information held by Florist Bexley:
- Right to Access: Obtain confirmation whether we process your personal data and request a copy of the data we hold about you.
- Right to Rectification: Request correction of any inaccurate or incomplete information.
- Right to Erasure: Request deletion of your personal data when it is no longer necessary for our purposes or if you withdraw consent (where applicable).
- Right to Restrict Processing: Ask us to restrict the processing of your data under certain circumstances.
- Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and have the right to transmit that data to another controller.
- Right to Object: Object to the processing of your data in some cases, such as for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing prior to withdrawal.
- Right to Lodge a Complaint: If you believe your data protection rights have been breached, you have the right to contact the UK Information Commissioner's Office (ICO).
Protecting Your Information
We implement reasonable physical, technical, and organisational safeguards to keep your personal data secure from unauthorised access, disclosure, alteration, or destruction. Our staff and service providers are trained and contractually obliged to handle your data securely and confidentially.
International Transfers
Florist Bexley primarily stores and processes your data within the United Kingdom. Should there be a necessity to transfer data outside of the UK or European Economic Area (EEA), we ensure that adequate safeguards are in place in compliance with data protection legislation.
Policy Updates
This Privacy Policy may be updated to reflect changes in legal requirements or our business processes. The revised version will apply from the date it is published. We encourage you to review this policy periodically to stay informed of how we process your data.
Contacting Us
If you have any questions about this Privacy Policy, your rights, or how your personal data is handled by Florist Bexley, please use the contact form provided on our website to reach out to us. We will respond to your queries as promptly as possible.