Florist Roehampton Privacy Policy

Introduction

This Privacy Policy explains how Florist Roehampton collects, processes, stores, and protects personal data when you place an order with us. This policy applies to all customers placing orders from Roehampton and the surrounding districts. We are dedicated to complying with the General Data Protection Regulation (EU 2016/679) ("GDPR") and ensuring your personal data is handled responsibly, transparently, and securely.

What Data We Collect

When you interact with Florist Roehampton, we may collect the following categories of personal data:

• Contact Information: Such as your full name, delivery address, billing address, and phone number.
• Order Information: Details of the products ordered, recipient details (name, address, and contact number if different from purchaser), and any specific messages or instructions for delivery.
• Payment Details: Limited payment information required to process transactions (such as part of your card number as retained by our payment provider). We do not store full card details ourselves.
• Communication Records: Records of correspondence and inquiries, including order confirmations or after-sales communications.
• Technical Data: Information about your interaction with our website, such as IP address, browser type, and device information, which is collected through cookies and similar technologies.

Lawful Basis for Processing

Our processing of your personal data is carried out under the following lawful bases as defined by the GDPR:

• Contract: Most data is processed to fulfill our contractual obligations to you, such as processing and delivering your floral orders.
• Legal Obligation: We may need to retain certain data to comply with tax, accounting, or other regulatory requirements.
• Legitimate Interests: We may process your data to improve our services, respond to inquiries, or prevent fraud, as long as such processing does not override your fundamental rights and freedoms.
• Consent: Where required, for example, for direct marketing communications, we will only process your data with your explicit consent. You can withdraw this consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• To process, confirm, and deliver your floral orders.
• To communicate with you regarding your orders or to respond to your inquiries.
• To fulfill our legal, regulatory, and tax obligations.
• To monitor and improve our services, understanding how customers interact with our website and offerings.
• To detect, investigate, and prevent fraudulent activities.
• Where you have consented, to send you information about our products, services, or special offers.

Data Retention

Florist Roehampton retains your personal data only for as long as is necessary for the purposes for which it was collected and to fulfill our legal and contractual obligations. Typically, we keep:

• Order and transaction data for up to six years from your last transaction, to comply with applicable financial and legal requirements.
• Communication records for a period appropriate to resolve inquiries or disputes.
• Technical data (such as cookies) in line with our website’s cookie policy and your browser or device settings.

Once data is no longer required, it will be securely erased or anonymized.

Data Processors and How We Share Your Data

Florist Roehampton works with trusted third-party service providers (processors) who help us deliver our services. These include:

• Payment processors for secure payment transactions.
• Delivery partners and couriers to facilitate order fulfillment.
• IT service providers to maintain and support our website and systems.
• Professional advisers, such as accountants, when necessary for compliance.

These processors are contractually obligated to handle your data strictly under our instructions, in line with GDPR requirements, and must not use your data for any other purpose.

We do not sell your personal data to any third parties. Data may only be disclosed to law enforcement or regulatory authorities when required by law.

Your Rights Under GDPR

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of Access: The right to obtain confirmation of the personal data we hold about you and a copy of it.
• Right to Rectification: The right to correct or update inaccurate or incomplete data.
• Right to Erasure: The right to request the deletion of your personal data where there is no lawful basis for retention.
• Right to Restriction: The right to request we suspend processing of your data in certain circumstances.
• Right to Data Portability: The right to obtain a copy of your data in a structured, commonly used format and have it transferred to yourself or another provider.
• Right to Object: The right to object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: If we rely on your consent for any processing, you may withdraw this consent at any time.
• Right to Lodge a Complaint: The right to complain to the relevant supervisory authority if you believe your data is not being handled appropriately.

To exercise any of your rights, please contact us using the details provided on our website. We take your privacy seriously and will respond to any request in accordance with GDPR requirements.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make significant changes, we will make the updated policy available on our website. We encourage you to review this page periodically to stay informed about how we are protecting your data.

Contact and Further Information

If you have any questions about this Privacy Policy or our privacy practices at Florist Roehampton, please refer to our contact section on our website. We are committed to respecting your privacy and maintaining the security of your personal information.