Florist Streatham Privacy Policy
Introduction
This Privacy Policy explains how Florist Streatham (“we”, “our”, “us”) collects, uses, shares, and protects personal data obtained from customers placing flower orders in Streatham and surrounding districts. It is designed to comply with the General Data Protection Regulation (GDPR) and applies to all individuals who interact with our services, whether purchasing through our website, by phone, or at our physical location.
What Personal Data We Collect
Florist Streatham is committed to collecting only the minimum personal data necessary to provide our products and services. Depending on how you interact with us, we may collect the following categories of personal information:
- Identity Data: Your full name, and in some cases, the name of the person receiving a delivery.
- Contact Data: Billing address, delivery address, phone number, and (if provided) email address for order confirmations and updates.
- Order Details: Information regarding your order, any special instructions, and payment confirmation details (note: we do not store full credit/debit card data).
- Transaction Data: Details about payments made, dates and amounts of transactions, and reference numbers.
- Communication Data: Records of correspondence when you contact us with queries, feedback, or complaints.
- Usage Data: Information about how you use our website and services (such as order history or customer preferences), collected via cookies or similar technology. This data is anonymized wherever possible.
Our Lawful Basis for Processing Your Data
Under the GDPR, we must have a lawful basis to process your personal data. The lawful bases upon which we rely are:
- Contractual Necessity: Most data we collect is necessary to fulfil our contract with you — for example, to process your order and arrange delivery.
- Legitimate Interests: We may process your data to improve our services, respond to enquiries, or for direct marketing relevant to your prior interactions, provided these interests do not override your privacy rights.
- Legal Obligations: Processing your information may be necessary for us to comply with legal requirements, such as maintaining financial records for tax purposes.
- Consent: On occasion, we may seek your explicit consent to send marketing communications. Where consent is relied upon, you may withdraw it at any time.
How We Use Your Data
Florist Streatham uses your data to:
- Process and deliver your orders, ensuring flowers reach the correct recipient in Streatham or surrounding districts.
- Communicate important information about your orders, including order confirmations and delivery updates.
- Address your questions, feedback, or complaints.
- Personalise our offerings or recommendations based on your preferences and order history.
- Comply with our accounting and legal obligations.
- Enhance and improve the quality of our website and customer experience through aggregated usage analysis.
How Long We Retain Your Data
We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:
- Order and Contact Data: Retained for 7 years in accordance with financial and legal record-keeping requirements.
- Marketing Preferences: Retained until you withdraw your consent or request erasure.
- Cookies and Technical Data: Retention is guided by our cookie policy and industry best practices.
Data Processors and Third Parties
We share data with trusted third-party partners solely for service provision and do not sell your data to third parties. Processors and recipients may include:
- Payment Processors: For handling secure payment transactions (we do not store full card details).
- Delivery Partners: Local couriers or postal services to ensure timely deliveries.
- IT and Website Support Providers: To maintain, support, and improve our infrastructure and digital services.
- Legal and Regulatory Authorities: Where required by law or for the resolution of disputes.
These third parties are required to protect your data in accordance with our instructions and GDPR requirements, and they are not permitted to use it for unrelated purposes.
Your Data Protection Rights
As a resident of the UK or the EU and a customer of Florist Streatham, you have the following rights under the GDPR regarding your personal data:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Ask us to correct or update your data if it is inaccurate or incomplete.
- Right to Erasure: Request deletion of your personal data, subject to retention obligations.
- Right to Restrict Processing: Ask us to restrict or limit the use of your personal data in certain circumstances.
- Right to Data Portability: Receive a copy of your personal information in a structured, commonly used, and machine-readable format.
- Right to Object: Object to certain types of processing, such as direct marketing.
- Right to Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time.
To exercise these rights, please contact us using the details provided on our contact page. We may need to verify your identity for security and confidentiality purposes when responding to such requests.
Security of Your Data
Florist Streatham takes safeguarding your data seriously. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures are regularly reviewed and updated as necessary.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any significant changes will be clearly communicated through our website. The most recent version of the policy will always be available to you.
Contacting Us
If you have questions about this policy, your privacy rights, or how we handle your data, please get in touch using the contact information provided on our website. We are committed to addressing any concerns you may have and ensuring that your data is handled responsibly.