Florist Blackfriars Privacy Policy

Privacy Policy Overview

This Privacy Policy explains how Florist Blackfriars collects, uses, stores, and safeguards your personal information when you place orders with us in Blackfriars and surrounding districts. Our commitment is to uphold your privacy rights and comply with the requirements of the UK General Data Protection Regulation (GDPR).

Who This Policy Applies To

This policy applies to all customers placing orders with Florist Blackfriars, whether online, by phone, or in person, for fulfilment in Blackfriars and neighbouring areas. It covers the collection and processing of your personal data in relation to our services, products, and customer support.

The Types of Data We Collect

To process your order, provide you with our products, and improve your experience, we may collect the following types of personal data:

• Identification Data: Name, delivery address, billing address, and contact number.
• Contact Details: Email address and phone number (if provided).
• Order Information: Details of your floral order, recipient details (such as name and delivery address), and message card content if provided.
• Payment Data: Payment confirmation details. All card payments are handled by secure payment processors; we do not store full card numbers or security codes.
• Communication Records: Records of your communications with us, such as queries and instructions related to your order.
• Technical Data: Information about your method of interaction with our website, such as IP address, browser type, and device identifiers. This is collected via cookies and similar technologies to ensure website functionality and security.

Lawful Basis for Processing Your Data

The GDPR requires that we have a legal basis for processing your personal data. The lawful bases relevant to our operations include:

• Contractual Necessity: We process personal data to fulfil, process, and deliver your floral order as per your request.
• Legitimate Interests: For improving customer service, responding to enquiries, managing complaints, and business administration. We only rely on this basis where your rights and interests do not override our legitimate interests.
• Legal Obligation: To retain records as required by law for financial, accounting, or security purposes.
• Consent: In specific circumstances, such as sending you marketing communications, we will only process your data with your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data will be used solely to:

• Process and deliver your flower order as instructed.
• Contact you regarding order details or delivery updates.
• Handle payment processing.
• Address customer queries or complaints.
• Improve the quality of our products and services.
• Comply with legal and regulatory requirements.

We do not use your data for automated decision-making or profiling of any kind.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy legal, accounting, or reporting requirements, and to resolve disputes or enforce our agreements. In general, we keep order and transaction records for up to six years, as recommended for business and legal compliance. After this period, personal data is securely deleted or anonymised.

Data Processors and Sharing

To deliver our services efficiently, we may share your data with trusted third-party service providers (‘data processors’), including:

• Payment processors to securely handle transactions.
• Delivery partners to fulfil and track your floral order.
• IT service providers assisting in the management of our website and systems.

Your data is never sold to third parties for marketing purposes. Data processors act only on our instructions and are bound by contractual obligations to uphold the security and confidentiality of your data in compliance with GDPR. Where any processor is located outside the UK or EU, we ensure that appropriate safeguards are in place to protect your information.

Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data, including:

• Right to Access: Request a copy of your personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, where legally permissible.
• Right to Restrict Processing: Request restriction of how we process your data in certain circumstances.
• Right to Object: Object to our processing of your data based upon our legitimate interests.
• Right to Data Portability: Request transfer of your personal data to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us using the communication methods available on our website or at our shop. We may need to verify your identity before responding to your request.

How We Safeguard Your Data

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, or damage. These measures include secure storage, encryption, limited access to staff, and ongoing review of our data handling practices.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our data handling practices or for legal reasons. Any updates will be posted in an accessible manner and the date of revision indicated. We encourage you to review this policy periodically.

Contact and Queries

If you have questions about this Privacy Policy or your data rights, you can contact us using the details available on our website or at our premises. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

Last updated: June 2024