Florist Bexleyheath Privacy Policy – Your Data & Rights

Introduction

This Privacy Policy explains how Florist Bexleyheath ('we', 'us', 'our') collects, uses, and protects your personal information when you place orders with us from Bexleyheath and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (GDPR).

Scope of This Policy

This policy applies to all customers who place orders with Florist Bexleyheath, whether for delivery or collection, and who reside or are located in Bexleyheath and its neighbouring areas. By engaging with our flower delivery and related services, you agree to the handling of your personal information as set out in this policy.

What Personal Data We Collect

We collect various types of personal data to process your order and provide you with the best possible service. The categories of data we may collect include:

• Identity Data: such as your full name.
• Contact Data: such as your address, delivery address, phone number, and other contact details necessary for communication and delivery.
• Order Information: details about the products you order, delivery preferences, and special instructions.
• Payment Information: such as credit or debit card details (handled via secure third-party processors).
• Correspondence: records of communications with our customer service regarding your order or enquiries.

We do not knowingly collect sensitive personal data (such as health information) unless you voluntarily provide it for purposes such as special delivery arrangements.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. We process your data on the following lawful grounds:

• Contractual Necessity: Processing is required to fulfil our contract with you, such as taking and delivering your order.
• Legal Obligation: We may process data where required by law, such as for accounting or tax records.
• Legitimate Interests: We process some data to improve our services, prevent fraud, or ensure the security of our website and business.
• Consent: Where you have actively opted in, for example for marketing or promotional communications. You have the right to withdraw your consent at any time.

How We Use Your Personal Data

We use your data for the following purposes:

• To process and deliver your floral orders.
• To assist with enquiries and customer service requests.
• To notify you of the status of your order.
• To comply with legal and financial obligations.
• If consented, to send you information about our offers and services.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, accounting, or reporting requirements. Generally, we keep order-related data for up to seven years for tax and accounting purposes. Where data is no longer required, we will securely delete or anonymise it.

Data Processors and Sharing

We may share your data with trusted third-party service providers who process data on our behalf, strictly for the following reasons:

• Payment processing (using secure payment gateways).
• Courier and delivery services for fulfilling your order.
• IT and website hosting providers who assist us in running our business functions.

Where we engage third-party processors, we ensure that they respect the security of your data and comply with data protection laws. We do not sell or trade your personal information to unrelated third parties for marketing purposes.

International Transfers

In rare circumstances, some processors may operate outside the UK or European Economic Area. In such cases, we ensure your data is protected to UK standards, using measures such as contractual clauses or adequacy decisions as permitted by law.

How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include encrypted transmission of payment data, secure internal systems, regular staff training, and strict access controls.

Your Rights

Under GDPR, you have a range of rights regarding your personal data. These include:

• Right of Access: Obtain a copy of your data that we hold.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Ask us to delete your data in certain circumstances.
• Right to Restrict Processing: Request limits on how we process your data.
• Right to Object: Object to certain types of data processing, such as direct marketing.
• Right to Data Portability: Request your data in a commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw this at any time.

To exercise any of your rights, or for more information about your rights and how we use your data, you may contact us using the contact options available on our website or in store. We may ask for proof of identity before fulfilling your request.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with a revised effective date. Please review this policy regularly to stay informed of how we protect your information.

Contact and Concerns

If you have any questions or concerns about how we handle your personal data, or if you believe your data protection rights have been infringed, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). Full details can be found on their website.

Thank you for trusting Florist Bexleyheath with your personal information. We are committed to treating your data respectfully and responsibly at all times.