Florist South Ruislip Privacy Policy

Introduction

This Privacy Policy explains how Florist South Ruislip ('we', 'our', or 'us') processes, protects, and respects your personal data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all individuals who place orders with Florist South Ruislip within South Ruislip and the surrounding districts. Please read this document carefully to understand how your personal information is handled.

What Data We Collect

When you place an order with Florist South Ruislip, we collect only the data necessary to fulfil your order and provide a personalised service. Depending on your interaction with us, we may collect the following categories of data:

  • Contact Information: Such as your name, delivery address, postcode, and where provided, the recipient’s name and address.
  • Order Details: Including order content (such as bouquet types, special requests), order reference, and delivery instructions.
  • Payment Information: We may collect payment details necessary to process your transaction (note: payment card information is typically handled by third-party payment processors and not stored by us).
  • Communication Data: Such as correspondence if you contact us directly for customer service, feedback, or queries.
  • Technical Data: Includes anonymized information about your use of our website, such as IP address, browser type, and device information (where relevant and applicable).

Lawful Basis for Processing

Under GDPR, we process your personal data only where we have a lawful basis to do so. The lawful bases relied upon by Florist South Ruislip include:

  • Contractual Necessity: Most of our data processing is necessary for the performance of a contract — for example, to fulfil your flower order and deliver it to the correct recipient.
  • Legal Obligation: We may need to process data to comply with our legal obligations, including financial record-keeping.
  • Legitimate Interests: We may process data for our legitimate interests, such as improving our services or communicating important updates, provided these interests do not override your rights and freedoms.
  • Consent: Where we rely on your consent (for example, if you opt in to marketing communications), you have the right to withdraw that consent at any time.

How We Use Your Data

Your information is used strictly for the following purposes:

  • Processing and fulfilling your orders, including delivery coordination in South Ruislip and surrounding districts.
  • Providing customer service and responding to your queries.
  • Fulfilling any legal requirements and record-keeping obligations.
  • Improving our services by analysing how our website and ordering process is used (on an anonymized basis).
  • Where you have opted in, sending you information about our products, offers, and events.

Data Retention

We retain your personal data only for as long as is necessary for the purposes explained above. Typically, order and transaction data are retained for up to seven years to comply with financial regulations and in case of future queries or disputes. Other types of data, such as customer correspondence, are retained only for as long as needed to resolve the matter.

Once retention periods expire or data is no longer required, we securely delete or anonymize your data. We regularly review our data retention policies to ensure ongoing compliance.

Processors and Third Parties

Florist South Ruislip may engage trusted third-party service providers to assist in processing your data. These may include:

  • Payment Processors: Handling secure payment transactions.
  • Delivery Partners: Coordinating local deliveries to ensure your orders reach their intended recipients.
  • IT and Hosting Providers: Ensuring the secure operation of our website and data storage.

All such processors are contractually obligated to protect your data in accordance with GDPR and may process your data only to provide services as instructed by us. Florist South Ruislip does not sell or share your data with unauthorised third parties.

International Data Transfers

Your personal data is typically processed within the UK and European Economic Area (EEA). If data is transferred outside these areas, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your privacy.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure: In certain circumstances, you can request the deletion of your data.
  • Right to Restrict Processing: You can ask that we limit how your data is used.
  • Right to Data Portability: Where relevant, you may request your data in a portable format.
  • Right to Object: You may object to data processing carried out for legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you wish to exercise any of these rights, please get in touch with us and we will respond according to GDPR requirements. We may need to verify your identity before fulfilling your request to protect your privacy.

Data Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction. Our website and systems are regularly tested and updated to maintain high security standards.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes to our practices or legal obligations. We encourage you to review this policy periodically; significant changes will be communicated where appropriate. The date of the last update will be noted at the top of this policy.

Contact Us

If you have any questions about this policy or your data rights, please contact Florist South Ruislip's data protection representative. We are dedicated to responding to your requests in a timely and compliant manner.