Privacy Policy for Shadwell Florist Customers
Introduction
This Privacy Policy provides information on how Shadwell Florist collects, uses, processes, and retains personal data of customers placing orders within Shadwell and the surrounding districts. Our commitment to your privacy is guided by the General Data Protection Regulation (GDPR) and applicable UK data protection laws. Please review this policy to understand your rights and our obligations in safeguarding your information.
Scope of This Policy
This Privacy Policy applies to all individuals who place orders or make enquiries with Shadwell Florist, whether in person, by telephone, or through our website, for delivery or collection in Shadwell and its surrounding districts. The policy covers the personal data we require to process your order or provide our services.
Information We Collect
To fulfil your orders and provide a high standard of service, we collect the following types of personal data:
- Contact Details: Name, delivery address, billing address, phone number.
- Order Details: Details of the products ordered, special instructions, delivery preferences, messages for the recipient.
- Payment Details: Limited payment information required to process payments securely via our payment processors (we do not retain card numbers).
- Communication Records: Records of your communications with us, for example, queries or complaints relating to your order.
- Technical Data: If you use our website, we may collect anonymised information about your device, IP address, and browsing activities via cookies.
Lawful Basis for Processing Your Data
We collect and use your personal information under the following lawful bases, as defined by the GDPR:
- Performance of a Contract: Processing your data is essential to fulfil our contractual obligations in providing ordered products and handling your requests.
- Legal Obligation: Certain information must be kept for tax or accounting purposes, in accordance with applicable laws.
- Legitimate Interests: We may process your data to improve our service, handle customer queries, or prevent fraud, where these interests are not overridden by your rights.
- Consent: For specific, non-essential uses (such as sending marketing communications), we will ask for your explicit consent. You are free to withdraw your consent at any time.
How We Use Your Information
We use your data only for purposes necessary to:
- Process and fulfil your orders, including contacting you about your order status.
- Arrange for the delivery or collection of your purchased flowers and gifts.
- Respond to any enquiries or feedback you provide.
- Comply with our legal and regulatory obligations.
- Enhance the quality and security of our services.
Data Sharing and Processors
To process your orders and manage our business operations, it may be necessary to share your data with selected third parties (known as data processors) who act on our behalf. These include:
- Payment processors: Securely process payments and refunds (we share only the information required for that purpose).
- Delivery partners: Trusted couriers or delivery drivers to ensure prompt and accurate delivery of your items.
- IT and website support providers: To assist with the security and functionality of our website and systems.
All processors are contractually required to comply with GDPR, process data only as instructed by Shadwell Florist, and implement robust security measures. We never sell your data or share it with third parties for their own marketing purposes.
Retention of Your Data
Shadwell Florist retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally, we retain order and contact information for up to six years after your last purchase, in line with accounting and tax obligations. After this period, your data will be securely deleted or anonymised.
How We Protect Your Information
We implement a range of technical and organisational measures to ensure the security of your personal data. These include secure storage systems, restricted access to data, regular review of our security procedures, and staff training on data protection. In the unfortunate event of a data breach, we have procedures in place to notify affected individuals and regulatory authorities as required by law.
Your Rights Under GDPR
As a customer, you have several rights regarding your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may ask us to correct inaccurate or incomplete data.
- Right to Erasure: Under certain circumstances, you may request your data be deleted.
- Right to Restriction: You can request we limit the processing of your personal data in certain situations.
- Right to Data Portability: You may request your information in a format that allows you to transfer it to another provider.
- Right to Object: You can object to processing carried out based on our legitimate interests.
- Right to Withdraw Consent: Where you have given consent for a specific use of your data, you may withdraw it at any time.
To exercise any of these rights, please contact us by the usual service channels or in writing. We will respond to all legitimate requests in accordance with applicable laws and within the statutory time frames.
Updates to This Policy
We may update this Privacy Policy periodically to reflect legal, regulatory, or operational changes. The most recent version will always be available at our business premises and website. If the changes are substantial, we will take steps to inform our customers directly where appropriate.
Further Information
For further questions or complaints about how we handle your data, you may contact us through our established communication channels, or you may contact the UK Information Commissioner's Office for independent advice.
Thank you for trusting Shadwell Florist with your personal information. We are dedicated to treating your data with care and respect at all stages of your experience with us.
