Privacy Policy for Florist Sands End Customers

Introduction

This Privacy Policy explains how Florist Sands End collects, uses, stores, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). The policy applies to all individuals placing orders with Florist Sands End from Sands End and the surrounding districts. We are committed to handling your data securely and transparently, ensuring your privacy is respected at all times.

What Personal Data We Collect

When you place an order or interact with Florist Sands End, we may collect and process the following types of data:

  • Identification Data: Full name, delivery address, and billing address.
  • Contact Information: Telephone number and, if provided, alternative contact numbers.
  • Order Details: Records of your orders, preferences, delivery instructions, and any special requests.
  • Payment Information: Payment details handled securely through our payment processors, though we do not store full credit or debit card numbers.
  • Communication Data: Records of communications when you contact us, including feedback and queries.

Lawful Basis for Processing Your Data

Florist Sands End processes your personal data under the following lawful bases as permitted by GDPR:

  • Contractual Necessity: To process, fulfil, and deliver your orders and manage your account.
  • Legal Obligations: To comply with legal, tax, and accounting requirements.
  • Legitimate Interests: To improve our services, respond to your enquiries, and maintain quality customer support, provided these interests do not override your rights.
  • Consent: In cases where you provide additional data or wish to receive marketing communications, we will obtain your explicit consent, which can be withdrawn at any time.

How We Use Your Information

Your data is used for the following purposes:

  • Processing and fulfilling your floral orders, including delivery logistics.
  • Contacting you regarding your order, including updates or questions about your preferences.
  • Handling payments and refunds through secure third-party processors (see below).
  • Responding to your requests, feedback, and any customer service enquiries.
  • Improving our services and efficiency based on customer feedback and order history.
  • Meeting our legal and regulatory obligations.

Data Retention Policy

Florist Sands End retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, and to comply with legal requirements. Specifically:

  • Orders and Delivery Data: Stored for up to six years for accounting and tax compliance.
  • Contact Information and Communications: Retained for up to two years after your last interaction with us, unless a longer period is required by law.
  • Marketing Preferences: If you have subscribed to marketing communications, your preferences and data will be kept until you opt out or withdraw your consent.

Once the relevant retention period has expired, your data will be securely deleted or anonymised.

Data Processors and Third Parties

To provide our services efficiently, we may share your personal data with strictly selected third-party service providers:

  • Payment Processors: Trusted, GDPR-compliant payment gateways for handling transactions securely.
  • Delivery Partners: Local couriers who deliver your flowers and gifts as per your order instructions.
  • IT and System Providers: Service providers who help maintain our order management and customer service platforms.

All third-party processors are bound by contractual obligations to process your data only as instructed and to adhere to GDPR standards. We do not sell or share your personal data with organisations for their own marketing purposes.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request corrections if your data is inaccurate or incomplete.
  • Right to Erasure: Ask for deletion of your data where there is no lawful reason for us to continue processing it.
  • Right to Restrict Processing: Request us to limit the processing of your personal data in certain circumstances.
  • Right to Data Portability: Receive your provided data in a structured, machine-readable format and, where possible, have it transferred to another provider.
  • Right to Object: Object to the use of your data for direct marketing or certain other applications.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: If you believe your rights have been infringed, you may lodge a complaint with the Information Commissioner's Office or your local data protection authority.

Data Security

We take data protection seriously and have implemented appropriate technical and organisational measures to safeguard your personal data against loss, misuse, or unauthorised access, alteration, or disclosure. These include secure server infrastructure, encryption, restricted access to authorised staff and partners, and regular data protection training for our personnel.

Policy Scope and Updates

This Privacy Policy covers all services and transactions provided by Florist Sands End to customers and recipients placing orders from Sands End and the surrounding districts. We may periodically update this policy to reflect changes in regulations, technology, or our business practices. Any revisions will be clearly indicated and made available to you before they take effect.

Contacting Us

If you have any questions about this Privacy Policy, require more information, or wish to exercise your GDPR rights, please contact Florist Sands End using our website’s official contact form or by post. Our team takes your privacy seriously and will respond to your queries as soon as possible.