Florist Crofton Park Privacy Policy

Scope of This Privacy Policy

This Privacy Policy outlines how Florist Crofton Park ('we', 'us', or 'our') processes personal data when you place an order with us from Crofton Park or the surrounding districts. It applies to all customers who interact with our floral delivery services, whether online, by telephone, or in person. We are dedicated to upholding your rights under the UK General Data Protection Regulation (GDPR) and other applicable laws.

What Data We Collect

When you make a purchase, we collect only the personal data necessary for processing your order and providing excellent service. This includes:

• Identity Data: Name, and in certain cases, title or preferred form of address.
• Contact Data: Billing and delivery address, phone number (if provided), and any other relevant contact information.
• Order Data: Details of your order, special instructions, and any communications related to your purchase.
• Payment Data: Limited payment information such as transaction details. We do not store full payment card details or security codes in our systems.
• Device Data: IP address and browser information, collected when you visit our website to support the website’s functionality and security, and to understand how our services are used.

We do not knowingly collect or process data from children under the age of 16 without verified parental consent.

Lawful Basis for Processing

We only process your personal data where there is a lawful basis under the GDPR. For Florist Crofton Park customers and users, these include:

• Contractual Necessity: Processing your data is necessary to fulfil your order, communicate about its status, and provide pre- and post-sale customer service.
• Legal Obligation: We may process and retain certain information for our legal and regulatory requirements, such as tax records and fraud prevention.
• Legitimate Interests: Where it is in our legitimate business interests to use your data for service improvements, handling complaints, or defending legal claims, provided these interests do not override your rights.
• Consent: In cases where you have given explicit consent (for example, signing up for a marketing newsletter), you always have the right to withdraw your consent at any time.

How We Use Your Data

Your data is used exclusively for the intended purposes:

• Processing and delivering your floral order, including custom instructions and delivery to the designated recipient.
• Communicating with you about your order or related enquiries.
• Improving our products, services, and customer experience.
• Compliance with applicable laws and regulations.

We do not sell or rent your information to third parties.

Data Retention

We retain personal data only as long as necessary for the stated purposes. Typically, order-related data is kept for up to seven years to comply with accounting and tax regulations, unless a longer or shorter retention period is required or permitted by law. Data used for customer service or dispute resolution may be retained for a maximum of six years following your last interaction. Payment details are never held beyond the completion and verification of the transaction. For data processed on the basis of your consent (such as for marketing communications), we retain your information until you opt-out or withdraw your consent.

Data Processors and Sharing

To facilitate smooth operations, we may share your data with trusted processors, such as:

• Payment Processors: Secure third-party companies that complete your payment transaction. They are required to handle data securely and in compliance with data protection laws.
• Delivery Services: Couriers or drivers involved in delivering your order, supplied only with data essential to complete the delivery.
• IT and Hosting Providers: Companies providing secure data storage, systems administration, and website support, all under proper data protection agreements.

All processors are contractually bound to handle your data only on our instructions and in full compliance with GDPR. We do not transfer your data outside the UK or the European Economic Area (EEA) unless adequate protection is in place, in line with GDPR requirements.

Your Data Protection Rights

As a Florist Crofton Park customer, you have a range of rights concerning your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask for incorrect or incomplete information to be corrected.
• Erasure: Request that your data be deleted when no longer necessary, subject to legal or contractual obligations.
• Restriction: Limit how we use your data in certain circumstances.
• Portability: Receive your information in a commonly used format and transfer it to another provider if you wish.
• Object: Object to our processing of your data in certain cases, including direct marketing.
• Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise your rights, please contact us using the contact options presented on our website. For security, we may require you to provide verification before fulfilling your request.

Protecting Your Data

We follow industry standards to safeguard your personal information, including secure payment gateways, restricted access protocols, and regular reviews of our data protection practices. While we strive to protect your information, no data transmission method can be guaranteed 100% secure.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational reasons. The most current version will always be available on our website, with the effective date noted at the top of the policy document.

Contacting Us

If you have questions or concerns about this Privacy Policy, your personal data, or wish to exercise any of your data protection rights, you can contact us through the contact form or other methods displayed on the Florist Crofton Park website.