Florist Charlton Customer Privacy Policy

Introduction

Florist Charlton values the privacy of our customers and is committed to safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you place flower orders with Florist Charlton, whether you are located in Charlton or the surrounding districts. Our practices comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Please review this policy to understand your data rights and how we protect your information.

Scope and Applicability

This Privacy Policy applies to all personal data collected from customers placing orders with Florist Charlton, whether through our website, phone, in-person, or other direct means, from Charlton and nearby districts. By placing an order, you consent to the terms of this Privacy Policy regarding the handling of your personal information.

What Data We Collect

When you engage with Florist Charlton for an order, we collect various categories of personal data. The types of data we may collect include:

• Identification information: Full name, title, and contact details (such as address and telephone number)
• Order information: Delivery details (including recipient’s name and address), card message content, product selections, and delivery instructions
• Transactional information: Details related to orders, payment methods (though not card numbers), billing and shipment records
• Communication data: Records of your correspondence and communications related to orders or customer service queries
• Technical data: Details derived from cookies and usage data if you use our website, such as browser type, IP address, and usage frequency

Purpose and Lawful Basis for Processing

Florist Charlton only collects and processes your personal data when lawful grounds exist under GDPR. We process your data for the following purposes and based on the following legal bases:

• Contractual necessity: To process, fulfil, and deliver your flower orders, process payments, and provide order-related customer service. Lawful basis: Performance of a contract.
• Legal obligations: To comply with statutory obligations, such as record-keeping for tax and accounting purposes. Lawful basis: Compliance with a legal obligation.
• Legitimate interests: For operational purposes, including supporting business administration, quality control, and the improvement of our services. Lawful basis: Legitimate interests, balanced with your data rights.
• Consent: We may ask for your explicit consent before sending direct marketing communications. You can withdraw your consent at any time.

How We Use and Process Your Data

Your personal data is used strictly for the purposes outlined above. Information such as your name, contact details, and order information is necessary to fulfil your requests and deliver orders to the chosen recipient. Transactional and payment data are handled securely and in accordance with industry standards. We do not use your data for profiling or automated decision-making beyond what is required for efficient order processing.

Retention of Your Data

We retain your personal data only as long as necessary for the purposes it was collected. The retention period is determined by order fulfilment, compliance with legal obligations, tax and accounting requirements, and for handling complaints or queries related to your order. Generally, we will retain transactional and payment data for up to seven years to comply with statutory accounting rules. Data used for marketing (with your consent) is retained until you withdraw consent or request deletion.

Sharing and Processing of Data

Your personal data may be shared with trusted third-party service providers (“processors”) when required for business operations. These may include:

• Courier and delivery companies tasked with delivering your order
• Payment processing providers to securely handle transactions
• IT and system support providers for website and data storage management
• Accountants or legal advisors in relation to statutory obligations

We ensure all third-party processors uphold adequate data protection standards and only process your information under our instructions and for specified purposes. We do not sell or disclose your personal data to third parties for unrelated marketing activities.

International Transfers

Generally, your data is not processed outside of the UK or European Economic Area (EEA). In cases where international data transfers may occur (for IT support or cloud storage), we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Your Data Protection Rights

Under GDPR, you are entitled to the following rights:

• Right of access: Obtain confirmation of whether we process your data and receive a copy of the data held
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data, where there are no overriding legitimate grounds for continued processing
• Right to restrict processing: Ask us to limit our processing of your data in specific circumstances
• Right to data portability: Receive your data in a structured, commonly used format, or have it transmitted to another controller
• Right to object: Object to processing of your data based on legitimate interests or direct marketing
• Right not to be subject to automated decision-making: Not to be subject to decisions based solely on automated processing

To exercise any of these rights, please contact us using the details provided at the end of this policy.

Data Security

We have implemented technical and organisational measures to protect your personal data from loss, misuse, alteration, or unauthorised access. Only authorised personnel and processors have access to your data, and all access is restricted and monitored according to our data security protocols.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect legislative changes or improvements to our data management practices. We encourage customers to review this policy periodically to ensure their continued understanding of how their data is managed.

Contacting Us

If you have any questions about this Privacy Policy or how Florist Charlton manages your data, please get in touch using our official contact details available on our website or by visiting our shop in person. We are committed to addressing your concerns and facilitating your rights under GDPR.