Florist West Norwood Privacy Policy

Introduction

At Florist West Norwood, we are committed to safeguarding the privacy and security of our customers’ personal data. This Privacy Policy explains how your data is collected, used, stored, and protected when you place orders with Florist West Norwood, whether you are from West Norwood or nearby districts. We are fully committed to compliance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Scope of This Policy

This Privacy Policy applies to all individuals placing orders with Florist West Norwood, including residents of West Norwood and surrounding districts. By ordering from us, you consent to the practices described here. If you do not agree with this policy, please do not submit your personal data.

What Data We Collect

Florist West Norwood may collect a range of personal information essential for processing your orders and enquiries. Depending on your interaction with us, the personal data we collect may include:

• Identification Data: Name and title.
• Contact Information: Delivery address, billing address, and, if relevant, the recipient’s name and address.
• Communication Data: Details of your communications and queries, any special instructions, and order notes.
• Order Information: Details about orders you have placed and delivery preferences.
• Transaction Data: Payment method and related billing information (note: credit/debit card numbers are processed securely and are not stored by us).
• Technical Data: IP address, browser type, device type, and how you use our website, through essential cookies (where applicable).

Lawful Basis for Data Processing

We only collect and process your personal information where we have a legal basis to do so, under GDPR. The lawful bases we rely on include:

• Contractual Necessity: Processing your data is necessary for fulfilling orders and delivering requested services.
• Legal Obligation: We are required by law to keep certain records (e.g., for tax purposes).
• Legitimate Interests: We may process your data to improve our services or communicate relevant information about your order, provided this does not override your rights.
• Consent: For certain marketing communications (when relevant), we will seek your clear consent.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling your flower orders, including payment and delivery.
• Contacting you with updates related to your order.
• Responding to your enquiries or feedback.
• Meeting legal and regulatory requirements.
• Improving and developing our products and services.
• Where you have consented, sending you occasional promotional materials or satisfaction surveys.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described above, and to meet our legal obligations. Typically, order information is kept for up to seven years from the completion of your transaction, to comply with accounting and tax regulations. After this period, your information will be securely deleted or anonymised.

Data Sharing and Processors

To deliver our services efficiently, we may share your data with trusted third parties, known as 'processors', under strict contractual obligations. These may include:

• Payment processing services for secure transactions.
• Delivery service providers to ensure your flowers reach their destination.
• IT service providers who support the functionality and security of our website and internal systems.
• Professional advisers (such as accountants or legal counsel), to comply with legal obligations.

We ensure all processors comply with GDPR and will never sell or rent your personal information to third parties. If required by law, we may disclose your information to authorities for compliance purposes.

Data Security

We take data protection seriously and implement robust technical and organisational measures to secure your personal information. This includes encrypting data transmissions, regular cybersecurity reviews, access controls, and staff data protection training. Despite these efforts, absolute security cannot be guaranteed, so we encourage you to exercise care with your personal data at all times.

Your Rights under GDPR

As a data subject, you have the following rights regarding your personal information processed by Florist West Norwood:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Ask us to delete your personal data, under certain circumstances.
• Right to Restrict Processing: Request restriction of processing where applicable.
• Right to Data Portability: Obtain personal data in a structured, commonly used, machine-readable format and request we transmit it to another organisation.
• Right to Object: Object to processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data rights are not being respected.

To exercise any of these rights, please contact us using one of our published customer contact methods. We may require proof of identity to safeguard your data.

Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will be published in this section. Please review it before placing each order to ensure you remain informed of our privacy practices.

Contact Us

If you have questions about this Privacy Policy or how your information is handled by Florist West Norwood, please reach out using our published contact options. Our team is committed to upholding your data privacy rights and will address any concerns promptly.