Wealdstone Florist Privacy Policy

Introduction

This Privacy Policy outlines how Wealdstone Florist collects, uses, stores, and protects your personal data in line with the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Wealdstone Florist, whether they reside in Wealdstone or surrounding districts.

What Data We Collect

When you place an order with Wealdstone Florist, we collect certain personal data in order to process your order and provide you with our products and services. The types of data we typically collect include:

• Identification Information: Name and title
• Contact Details: Delivery address, billing address, telephone number, and other contact information
• Order Information: Products ordered, order notes, delivery instructions, and recipient details (if sending to another person)
• Payment Information: Transaction details (note: payment card information is processed securely and not stored by us)
• Communication Data: Records of correspondence, such as order confirmations or enquiries

We may also gather technical data such as IP addresses, browser information, and other data collected through cookies when using our website or digital ordering platforms.

Our Lawful Basis for Data Processing

Wealdstone Florist processes your personal data in accordance with the lawful bases set out by the GDPR. Specifically, our lawful bases include:

• Contractual Necessity: We use your data to fulfil and manage your order, including processing payment, delivering products, and providing customer service.
• Legal Obligation: In certain cases, we may be required to retain or disclose data to comply with legal or tax requirements.
• Legitimate Interests: We may use your data to improve our products, services, and customer experience, provided these interests are not overridden by your privacy rights.
• Consent: Where applicable and with your explicit consent, we may send you information about promotions, new products, or updates. Consent for these communications can be withdrawn at any time.

How We Use Your Data

Your personal data is used solely for the purposes of processing your order, delivering products, and providing customer support. Wealdstone Florist does not sell your data or use it for unrelated purposes. When required, anonymised and aggregated data may be used for business analytics or service improvements.

Data Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods typically follow these guidelines:

• Order and Transaction Records: Retained for up to six (6) years to comply with accounting and legal requirements.
• Customer Correspondence: Retained for up to two (2) years after your last contact with us for customer service purposes.
• Marketing Consent: Data retained only as long as consent is active and up to six (6) months if withdrawn, after which personal information is removed from marketing lists.

When retention is no longer necessary, data is securely deleted or anonymised.

Our Data Processors

In the course of processing, your data may be handled by trusted third-party processors who provide services such as payment processing, order fulfilment, IT hosting, and website management. These processors are contractually obliged to comply with the GDPR and safeguard your information. Sensitive payment information is processed by PCI-compliant payment service providers and is not stored by Wealdstone Florist.

All processors are chosen carefully, and we ensure data sharing is restricted to the minimum required for service delivery. Personal data is not transferred outside the European Economic Area (EEA) except where adequate safeguards are ensured.

Your Data Protection Rights

Under the GDPR, you have several important rights regarding your personal data. These include:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask for any incomplete or inaccurate information to be corrected.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: Request temporary suspension of data processing in certain scenarios.
• Right to Object: Object to the processing of your data for specific uses, including direct marketing.
• Right to Data Portability: Receive your data in a commonly used, machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting prior processing.
• Right to Lodge a Complaint: You may file a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us through the contact details provided at the end of this policy or via our website.

Data Security Measures

Wealdstone Florist takes the protection of your data seriously. We implement appropriate technical and organisational measures to safeguard the confidentiality and security of your personal information, including secure server technology, encryption of payment transactions, controlled system access, and staff training on data privacy.

Policy Scope and Updates

This Privacy Policy applies to all customers ordering from Wealdstone Florist in Wealdstone and the surrounding districts. We may periodically update this policy to reflect business changes or changes in data protection law. When changes occur, the revised policy will be made available on our website and, where appropriate, communicated to you directly.

Further Information and Contact

If you have any questions, concerns, or would like further information about how we process your personal data, please contact us via the contact details provided on our official website or visit us at our shop.

Thank you for trusting Wealdstone Florist with your personal information. Your data privacy is important to us, and we are committed to processing your information responsibly and securely.