Florist Camberwell Privacy Policy

Introduction

At Florist Camberwell, your privacy is of utmost importance to us. This Privacy Policy explains how we handle your personal data in accordance with the UK General Data Protection Regulation (GDPR). It sets out the details of what data we collect, the lawful basis for processing your data, how long we keep it, the processors we use, and your rights. This Policy applies to all customers placing orders from Camberwell and the surrounding districts.

What Data We Collect

When you place an order with Florist Camberwell, we may collect the following types of personal data:

• Identity Data: Your name, delivery recipient's name.
• Contact Details: Delivery address, billing address, phone number.
• Communication Data: Correspondence you send to us, including enquiries, order instructions, or complaints.
• Order Information: Details about the flowers or products ordered, delivery instructions, and preferences.
• Payment Data: Transaction reference, payment method (please note: card information is processed by secure third-party payment platforms and is not stored by Florist Camberwell).
• Technical Data: IP address, browser type, and commonly used website analytics data if you visit our website.

We do not collect or store sensitive personal data (such as health, race, or religious beliefs) unless provided by you as part of a specific request or instruction.

Lawful Basis for Processing Personal Data

GDPR requires that we have a lawful basis for processing your data. At Florist Camberwell, we process your personal data on the following bases:

• Contractual necessity: Most personal data is processed to fulfill our contract with you, such as processing and delivering your order and fulfilling customer service obligations.
• Legal obligation: Some data may be processed to meet accounting, tax, or legal requirements.
• Legitimate interests: We may use your data to improve our products, services, and customer experience, or to prevent fraud. Where we rely on legitimate interests, we have assessed these interests do not override your privacy rights.
• Consent: If you opt in to receive marketing communications, we process your data based on your consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used to:

• Process your orders and deliver flowers or related items.
• Send order confirmations and updates.
• Respond to enquiries, requests, and complaints.
• Process refunds or resolve issues.
• Comply with regulatory or legal obligations.
• Enhance and personalise your customer experience.
• Send you marketing information, only if you have specifically opted in for such communications.

How Long We Keep Your Data

Personal data is retained only as long as necessary for the purposes for which it was collected, as required to comply with legal obligations, or to resolve disputes. Our retention schedule is as follows:

• Order and customer records: Retained for up to 6 years from the date of your order, primarily to meet legal and financial record-keeping requirements.
• Marketing data: Held for as long as you remain subscribed. If you unsubscribe, your marketing data will be deleted promptly.

When your data is no longer needed, it will be securely deleted or anonymised.

Third-Party Processors

Florist Camberwell utilises trusted third-party processors to help deliver our services effectively. These include:

• Payment service providers to securely manage transactions (your payment details are handled directly by these providers and not stored by us).
• Delivery and courier companies to enable the fulfilment of your orders.
• IT service and hosting providers for the secure management of our website and systems.
• Accountancy and legal service providers as required by law.

We require all third-party processors to respect the security of your personal data and to process it in line with the law. They are not permitted to use your data for their own purposes and may only process it for specified purposes and according to our instructions.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• The right to access – You can request copies of your personal data held by us.
• The right to rectification – You can request that we correct or update personal data you believe is inaccurate or incomplete.
• The right to erasure – You can request the deletion of your personal data in certain circumstances (the 'right to be forgotten').
• The right to restrict processing – You can request that we limit how we use your data in certain circumstances.
• The right to object – You have the right to object to certain types of processing, such as for marketing purposes.
• The right to data portability – You can ask us to transfer your personal data to another organisation or directly to you in a machine-readable format.
• The right not to be subject to automated decision-making – Florist Camberwell does not perform automated decision-making using your data.

To exercise these rights, please contact us using the ‘Contact’ section on our website or in writing to Florist Camberwell at our registered business address. We will respond to your request within one month in accordance with GDPR.

Data Security

We take the security of your personal data seriously. Florist Camberwell employs appropriate measures to protect your data from accidental loss, unauthorised access, disclosure, alteration, or destruction. This includes regular staff training, secure IT systems, and ongoing review of our data handling procedures.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices, legal obligations, or the services we provide. We encourage you to review this policy each time you place an order or use our services.

How to Contact Us

If you have any questions about this Privacy Policy, how we use your data, or wish to exercise your rights, please reach out using the contact form or details provided in the ‘Contact’ section of our website. If you are not satisfied with how your query is handled, you also have the right to lodge a complaint with the UK Information Commissioner's Office.