South Croydon Florist GDPR Privacy Policy

Introduction

At South Croydon Florist, we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with South Croydon Florist from South Croydon and surrounding districts.

What Data We Collect

We collect the following types of personal data when you place an order or communicate with South Croydon Florist:

• Identification Information: Your full name, and (where applicable) company name.
• Contact Details: Your delivery address, billing address, telephone number, and where necessary, contact details for the recipient.
• Order Information: Details of your order, such as product selection, order value, delivery instructions and messages to recipients.
• Payment Information: Details required to process payments (processed securely by third-party payment providers; we do not store credit or debit card details).
• Communication Records: Records of communications via phone, online forms, or in-person requests.
• Technical Data: IP address, browser type, and information about how you use our website, if ordering online.

Lawful Basis for Processing

We only process your personal data where legally permitted, and our use of your data is based on certain legal grounds:

• Contractual Necessity: To process your order, fulfil deliveries, and provide customer support, your data is needed to enter into and perform our contract with you.
• Legal Obligations: We may retain transaction records to meet tax and accounting requirements, or to comply with anti-fraud legislation.
• Legitimate Interests: We use customer data for legitimate business reasons, such as improving our services, keeping you informed of order status, and, where appropriate, contacting you with relevant offers in the context of a prior transaction. We balance our interests with your privacy rights.
• Consent: Where we intend to send marketing and promotional material not covered by a prior relationship, we will only do so if you have given explicit consent. Consent can be withdrawn at any time.

How We Use Your Data

Your personal data is used for:

• Processing and fulfilling your flower and gift orders.
• Delivering items to the specified address.
• Managing payments, fees, and charges.
• Handling queries, requests, returns, and complaints.
• Improving our product and service offering.
• Meeting our legal and financial obligations.

How We Share and Transfer Your Data

We may share your personal information with selected third parties, known as processors, only when required to deliver our services, for example:

• Payment processors: To securely process payments on our behalf.
• IT service providers: For website operation, customer communication, and order management systems.
• Delivery partners: To complete the delivery of your order (including passes of recipient details for delivery purposes).
• Legal and regulatory authorities: If required for compliance with applicable laws or regulation, or to protect our business and customers from fraud or harm.

All data processors are required to handle your data in accordance with GDPR and only according to our instructions. We do not sell your data to third parties.

International Data Transfers

All personal data is stored and processed within the UK or in countries within the European Economic Area (EEA). If we need to transfer your data outside the EEA, we will ensure equivalent safeguards are in place.

How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil your order, comply with our legal obligations, resolve disputes, and enforce agreements. Data related to financial transactions will be retained for up to seven years in line with UK accounting regulations. Basic information (such as name and order record) may be retained to assist with repeat orders or customer service, unless you request deletion, subject to legal constraints.

Security of Your Data

We take the security of your personal data seriously. We employ a range of technical and organisational measures to protect your information from unauthorised access, alteration, or loss. These include secure access controls, regular data backup, and, where possible, encryption of sensitive data. Our staff receives training on data privacy, and all third-party processors are thoroughly vetted.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• The right to access – You can request a copy of the personal information we hold about you.
• The right to rectification – You have the right to ask us to correct any inaccurate or incomplete data we hold.
• The right to erasure – You can ask us to delete your data when it is no longer needed or if you withdraw consent (where applicable), subject to legal and contractual requirements.
• The right to restrict processing – You may request restriction of your data processing in certain circumstances.
• The right to data portability – Where applicable, you have the right to obtain and reuse your data for your own purposes across different services.
• The right to object – You can object to our processing of your data in certain scenarios, such as direct marketing.
• The right not to be subject to automated decision-making – South Croydon Florist does not use automated decision-making or profiling that has legal or significant effects on you.

You can exercise your rights by contacting us directly. We may require proof of identity to comply with such requests. We aim to respond to all requests within one month, as set by GDPR.

Complaints

If you are concerned about the way we process your personal data, please contact us in the first instance so we can address your concerns. You may also lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

Policy Updates

We may review and update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. Any significant changes will be made available to you before they take effect.

Contacting Us

If you have questions about this policy or how we use your personal data, please contact us through our shop or web form. We are committed to upholding your privacy rights and will assist you with any queries.