Your Privacy at Florist Greenford

Introduction

This Privacy Policy describes how Florist Greenford collects, uses, and protects your personal information, in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Greenford within Greenford and the surrounding districts. We are committed to maintaining your privacy and ensuring you understand your rights regarding your personal data.

What Data We Collect

When you use Florist Greenford's services to place an order or make an enquiry, we collect the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and telephone number.
• Order Information: Order details, payment confirmation (no card details are stored), product preferences, and messages attached to flower orders.
• Account Information: If you create an account with us, we also collect your chosen username and password.
• Communication Data: Any correspondence you have with us by email, phone, or through forms on our website.
• Technical Data: IP address, browser type, and usage data collected via cookies strictly necessary for the operation of our site.

Lawful Bases for Processing Your Data

Florist Greenford only processes your personal information where a lawful basis applies, in line with GDPR Article 6:

• Contractual necessity: To fulfil your order, process payments, and deliver flowers to your designated address.
• Legal obligation: To comply with legal or regulatory requirements, including record-keeping for financial and tax purposes.
• Legitimate interests: To improve our services, maintain security, and communicate relevant information about your order.
• Consent: On occasions where we seek your explicit consent (such as for marketing), you may withdraw this consent at any time.

Retention of Personal Data

We only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including legal, accounting, and reporting obligations. Typically, we retain order-related data, including customer contact and transaction information, for up to 6 years in accordance with UK accounting and tax regulations. If you have registered an account, your account information will be held until you request deletion or close your account.

After the relevant retention period, your personal data will be securely deleted or anonymised unless we are legally required to maintain it for a longer period.

Data Processors and Third Parties

Florist Greenford engages with trusted third-party service providers ("processors") who carry out key business functions on our behalf. These include:

• Payment processors: Securely process your payment information when you place an order. Your full payment card details are not stored on our systems.
• Delivery partners: To fulfil your delivery and ensure your order reaches its destination.
• IT service providers: To host our website, manage databases, and provide technical support.
• Professional advisers: Accountants, auditors, and legal advisers, where necessary for our business operations.

All processors are contractually required to process your data only as instructed by Florist Greenford and in full compliance with data protection laws. We do not sell or rent your personal data to third parties.

Your Rights Under GDPR

As a customer of Florist Greenford, you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to erasure: You can ask for your data to be deleted in certain circumstances, such as when it's no longer needed for purpose collected.
• Right to restriction of processing: You can request that we restrict how we use your data in specific situations.
• Right to data portability: Where applicable, you can ask us to transfer your data to another service provider.
• Right to object: You may object to processing based on our legitimate interests, or to receiving direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting any processing done before withdrawal.

To exercise any of these rights, please contact us using the contact form or details provided on our website. We will endeavour to respond to your request within the applicable legal timeframe. Please note that we may ask for proof of identity for security purposes. If you have concerns about our use of your data, you may also lodge a complaint with the Information Commissioner's Office (ICO).

Data Security

We implement appropriate security measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Our website uses up-to-date encryption and technical safeguards. Access to your information is limited to authorized personnel and service providers with a clear business need.

International Transfers

In most cases, your data is processed and stored within the United Kingdom or the European Economic Area (EEA). If we do need to transfer your personal data outside of these regions, we ensure that appropriate safeguards are in place to protect your privacy to the standard required by GDPR. This may include approved standard contractual clauses or ensuring the third country offers an adequate level of data protection.

Updates to This Privacy Policy

We may update or revise this Privacy Policy from time to time to stay in line with changes in our practices, legal requirements, or technology. Changes will be effective as soon as the revised policy is posted to our website. Please review this page periodically to ensure you are aware of our latest practices.

Contacting Florist Greenford

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please use the contact details provided on our website. We are committed to protecting your personal information and will respond promptly to all enquiries.