Privacy Policy for Florist Earls Court Customers
Introduction
This Privacy Policy outlines how Florist Earls Court collects, uses, stores, and safeguards your personal information in accordance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders for flowers or related services from Earls Court and neighbouring districts. We are committed to ensuring the privacy and security of your personal data throughout every stage of your engagement with us.
Scope of the Policy
This Privacy Policy covers all personal data collected, processed, and stored by Florist Earls Court relating to customers who place orders with us from Earls Court and the surrounding areas. By using our services, you acknowledge and agree to the practices described in this policy.
What Data We Collect
We collect and process the following categories of personal data as necessary for the provision of our services:
- Identification Information: Full name, recipient name (if different), and title.
- Contact Details: Address (for delivery and billing), phone number, and (if provided) communication references.
- Order Details: Product selection, delivery date and time, personal messages, card inscriptions, and instructions.
- Payment Information: Method of payment and transaction confirmation (payment is processed via vetted third-party providers; card details are not stored by us).
- Correspondence: Records of communications made via online forms, in-person, or over the phone, including customer service queries and feedback.
- Website Usage Data: Anonymous data such as IP address, device type, browser type, usage statistics, and cookies, to improve functionality and customer experience (see our Cookie Policy for more details).
Lawful Basis for Processing
In line with Article 6 of the GDPR, Florist Earls Court processes your personal data based on the following lawful grounds:
- Contractual Necessity: Processing is required for entering into or fulfilling a contract with you, for example, managing your order and delivering products.
- Legal Obligations: Compliance with applicable legal or regulatory requirements, such as retaining transaction records for tax purposes.
- Legitimate Interests: Processing that allows us to operate, improve our services, prevent fraud, and respond to customer inquiries (balanced with your rights and interests).
- Consent: Where we rely on your permission to send you marketing communications or process optional information, you may withdraw consent at any time.
How We Use Your Personal Data
Your personal data is used solely for legitimate business purposes, including:
- Processing your orders and arranging delivery.
- Contacting you regarding order confirmation, delivery updates, or any queries about your order.
- Managing payments and refunds via secure payment processors.
- Responding to your customer service inquiries or complaints.
- Fulfilling our legal and regulatory obligations.
- Improving our products, website, and customer experience by analysing aggregate data.
- Sending you marketing information where you have opted in.
Sharing and Disclosing Your Data
Florist Earls Court restricts access to your personal information to only those staff and trusted service providers who require it for legitimate business operations. We may share your data with the following third parties:
- Delivery Partners: Companies and couriers involved in fulfilling and delivering your order.
- Payment Processors: Accredited third-party platforms that process your payment securely on our behalf. We do not retain your card details.
- IT and Support Partners: Providers of website hosting, cloud services, and technical support, all of whom are bound by confidentiality and strict data protection agreements.
- Professional Advisors: Legal, accounting, or other professional advisors as required for compliance or legitimate interest purposes.
- Regulatory Authorities: Where necessary to comply with legal obligations.
We never sell, lease, or trade your personal data with third parties for marketing purposes.
International Transfers
We aim to store and process your data within the United Kingdom and the European Economic Area (EEA). Where data processing requires transfer outside these regions, we ensure adequate safeguards, such as standard contractual clauses, to protect your privacy rights.
Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, including:
- Fulfilling your order and providing you with service.
- Meeting our legal and regulatory obligations (for example, retaining order and invoicing records for up to 6 years as required by tax law).
- Addressing any customer queries or disputes.
Upon expiry of the retention period, your personal data is securely deleted or anonymised.
Your Rights Under GDPR
As a customer of Florist Earls Court, you have the following rights regarding your personal data:
- Right to Access: Request details and a copy of the personal data we hold about you.
- Right to Rectification: Request that inaccurate or incomplete data is corrected or updated.
- Right to Erasure: Request deletion of your personal data, subject to certain exceptions (such as legal retention requirements).
- Right to Restriction: Request that we restrict processing of your personal data in specified circumstances.
- Right to Object: Object to processing carried out on legitimate interest grounds or for direct marketing purposes.
- Right to Portability: Receive certain data in a machine-readable format and transmit it to another controller.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
To exercise these rights, or if you have questions or concerns regarding your data, please contact us using the information on our website.
Data Security
Florist Earls Court takes appropriate organizational and technical measures to safeguard your personal data. These measures include secure storage systems, restricted access protocols, regular security assessments, and staff training on data protection and privacy. However, no online or electronic system is entirely secure, so we cannot guarantee absolute security.
Policy Updates
We regularly review and update this Privacy Policy to reflect changes in our practices, operational requirements, or legal and regulatory developments. We encourage you to review this policy periodically. Any significant changes will be communicated to customers as appropriate.
Contact and Further Information
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please consult our customer service representatives using the contact methods available on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been infringed.