Streatham Florist Privacy Policy

Introduction

At Streatham Florist, we are committed to protecting the privacy and personal data of all our customers. This Privacy Policy describes how we collect, use, process, and safeguard your information in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy applies to all individuals placing orders with Streatham Florist from Streatham and surrounding districts.

What Data We Collect

When you place an order with Streatham Florist, whether for delivery or collection, we may collect the following categories of personal data:

• Identity Data: Name (first and last name).
• Contact Data: Delivery address, billing address, and postcode; phone number (if provided); and any other contact details you choose to provide.
• Order Information: Details about products ordered, delivery instructions, messages for recipients, and transaction history.
• Payment Data: Payment method details (note: we do not store complete payment card information; transactions may be managed by secure, third-party payment processors).
• Correspondence: Records of communication with customer service (such as queries, compliments, or complaints).
• Technical Data: Where applicable, details about your interaction with our website, such as browser type, device information, or log data.

Lawful Basis for Processing Personal Data

Under the GDPR, we are required to identify the lawful bases under which we process your personal data. Streatham Florist processes your data on the following grounds:

• Contractual Necessity: Most of the information we collect is required to fulfil our contract with you, such as processing your order, delivering flowers, and handling your payments.
• Legal Obligation: On certain occasions, we may be obliged to process your data to comply with legal and regulatory duties (e.g., for tax purposes or fraud prevention).
• Legitimate Interests: We may process your details to pursue our legitimate business interests in providing excellent customer service, managing customer relationships, and improving our services, provided these interests do not override your rights and freedoms.
• Consent: For certain activities, such as sending you promotional messages or marketing offers, we rely on your explicit consent (which you may withdraw at any time).

How We Use Your Data

Your personal data is used exclusively for purposes that are clearly identified and justified. These purposes include:

• Processing, confirming, and delivering your order.
• Communicating with you about your order status or responding to your enquiries.
• Maintaining accurate business records in compliance with applicable law.
• Improving our services and enhancing your customer experience.
• Sending you marketing communications, if you have opted in to receive them.
• Protecting the safety, security, and integrity of our business and customers.

Retention of Your Personal Data

Streatham Florist will retain your personal data only for as long as required to fulfill the purposes described above, and as required by law:

• Order and transaction records are generally retained for up to 7 years to satisfy accounting and legal obligations.
• Contact and communication records may be stored for up to 2 years following your last order, to assist in enquiries or disputes.
• Where we rely on your consent for marketing, your data will be kept until you withdraw your consent or until we no longer send such communications.
• In all cases, when data is no longer required, it will be securely deleted or anonymised.

Data Processors and Third Party Services

To provide our services efficiently, we may share elements of your personal data with selected third-party service providers ("processors") who process information on our behalf and under our instructions. These may include:

• Payment service providers, for card processing and payment verification.
• Delivery partners, where necessary for the delivery of flowers and gifts.
• Cloud storage and IT service providers, for secure management of data and communication infrastructure.
• Professional advisers (such as accountants or auditors) if necessary for compliance or legal obligations.

We ensure that all our processors are committed to maintaining the security and confidentiality of your data, in line with GDPR requirements. Streatham Florist does not sell or trade your personal data to any third parties for marketing purposes.

Your Rights as a Data Subject

Under the GDPR, you have a number of rights in relation to the personal data we hold about you. These include:

• Right of Access: You have the right to request access to and receive a copy of the personal data we hold about you.
• Right to Rectification: If any of your information is inaccurate or incomplete, you can ask us to correct it.
• Right to Erasure: You may request deletion of your personal data where there is no overriding lawful reason for us to retain it.
• Right to Restrict Processing: You can request us to restrict or suspend our processing of your data in certain circumstances.
• Right to Data Portability: You are entitled to receive your personal data (in a structured, commonly used, machine-readable format) and to transfer it to another service provider where technically feasible.
• Right to Object: Where we process your data based on legitimate interests or for direct marketing, you may object to this use at any time.
• Right to Withdraw Consent: Where consent forms the basis of our processing, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

If you wish to exercise any of your rights, you may contact us using the details provided through the usual communication channels.

Data Security

Streatham Florist takes the safety and security of your personal data seriously. We implement appropriate organisational and technical measures to prevent unauthorised access, loss, or misuse of your data, including but not limited to restricted access controls, encrypted communications, and secure data storage practices. Should a data breach occur that impacts your rights and freedoms, we will notify you and relevant authorities where required by law.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices or legal obligations. The latest version will always be available for inspection prior to placing an order. We encourage customers to review the policy from time to time to stay informed about how we protect your privacy.

Contact and Further Information

If you have any questions regarding this policy, your data, or wish to make a complaint about how your personal information has been handled, please reach out to Streatham Florist using our available contact options. We are committed to responding promptly to your queries and upholding your rights under the GDPR.