Florists Catford Privacy Policy: Commitment to Your Data Protection
Scope of This Privacy Policy
This Privacy Policy describes how Florists Catford ("we," "us," or "our") collects, uses, stores, and protects your personal data when you place an order with us, whether directly or through our designated services. This policy applies to all Florists Catford customers, including those residing in Catford and surrounding districts. We are dedicated to processing your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.
What Personal Data We Collect
When you use Florists Catford to place an order, interact with us, or use our services, we may collect and process the following categories of personal data:
- Contact Information: Name, delivery address, billing address, recipient’s name (if different), and telephone number.
- Order Details: Information about products ordered, delivery instructions, and any accompanying messages.
- Payment Information: Payment card details or transaction identifiers. Please note that we do not store payment card details; payment information is processed securely by our payment processors.
- Communication Data: Details of correspondence with us (e.g., queries, feedback).
- Technical Data: IP address, browser type, device identifiers, and usage data for website functionality and improvement.
Lawful Basis for Processing Personal Data
Under the UK GDPR, we must have a valid reason to use your personal data. Our lawful basis for collecting and processing your information are as follows:
- Performance of Contract: To fulfil your order, process payments, and deliver products to you or your recipient.
- Legal Obligations: To comply with applicable financial, accounting, and record-keeping laws.
- Legitimate Interests: To improve our services, prevent fraud, and respond to inquiries about your orders, provided these interests are not overridden by your rights.
- Consent: Where required, such as for direct marketing communications, we will seek your explicit consent. You may withdraw your consent at any time.
How We Use Your Data
Your data is used for the following purposes:
- Processing and fulfilling your orders (including notification of order status and delivery).
- Managing payment transactions securely.
- Responding to customer inquiries, complaints, or requests.
- Improving and monitoring the performance of our services.
- Fulfilling legal and regulatory obligations.
- Sending marketing and promotional material where you have given explicit consent.
Data Processors and Third Parties
In order to provide our services efficiently, we use trusted third-party service providers (data processors) who process your information strictly on our instructions and in compliance with UK GDPR. These may include:
- Payment Processors: Securely handle payment transactions and verify payment information. We do not have access to your full card details.
- Delivery Partners and Couriers: Ensure accurate and timely delivery of your floral orders based on recipient details provided.
- IT and Hosting Providers: Provide website infrastructure, technical support, and data security measures.
- Professional Advisors: Such as accountants, legal, or compliance consultants, solely for the purposes necessary to fulfil legal requirements.
All processors are subject to appropriate due diligence and contractual safeguards to ensure your data is processed only for the intended purposes and remains protected at every stage.
Data Retention: How Long We Store Your Data
We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required to comply with legal, accounting, or reporting obligations. Typically:
- Order and purchase data: Retained for up to six years to comply with financial and tax regulations.
- Customer communication data: Retained for up to two years after final correspondence.
- Marketing preferences: Retained until you withdraw consent or unsubscribe.
Once the retention period lapses, your personal information will be securely deleted or anonymised, unless there is a legitimate reason to continue processing (for example, to resolve disputes).
Your Rights Under the UK GDPR
You have the following data protection rights as a customer of Florists Catford:
- Right to Access: You may request access to your personal data and receive a copy of the information we hold.
- Right to Rectification: If your information is incomplete or inaccurate, you have the right to request correction.
- Right to Erasure ('Right to Be Forgotten'): You can request deletion of your personal data where it is no longer necessary or if you withdraw your consent (where consent was relied upon).
- Right to Restrict Processing: You may request us to limit our use of your data under certain circumstances.
- Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format to transfer to another service provider.
- Right to Object: You may object to the processing of your data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we process your data based on consent, you can withdraw your consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data rights have been infringed.
Data Security: Protecting Your Information
We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or misuse. This includes encryption, access controls, regular data security assessments, and staff training on data protection.
International Data Transfers
Your personal data is stored and processed within the United Kingdom or, where necessary, in countries which offer an adequate level of protection as determined under UK law. Should we transfer data to a country outside the UK, we ensure such transfers are covered by appropriate safeguards, such as standard contractual clauses, to protect your privacy rights.
Updates to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or service offerings. Updated versions will be made available upon request and the effective date will be clearly indicated. We encourage customers to revisit this policy regularly to stay informed about how we are protecting your information.
Contacting Florists Catford About Your Data
If you have questions about this Privacy Policy, require further details about our data processing activities, or wish to exercise any of your rights, please contact us using the methods provided on our website or through our standard communication channels. We are committed to responding to your queries promptly and transparently.