Florist Sydenham Hill Privacy Policy

About This Privacy Policy

This Privacy Policy sets out how Florist Sydenham Hill ("we", "us", "our") collects, uses, and protects your personal information when you place an order with us from Sydenham Hill and surrounding districts. We are committed to respecting and protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and all relevant United Kingdom data protection laws.

What Data We Collect

When you place an order or interact with Florist Sydenham Hill, we collect and process the following categories of personal data:

• Identity Data: Such as your full name, and in some cases, the recipient's name if you are ordering on behalf of someone else.
• Contact Data: Including your billing/delivery address and contact telephone number, and details of the recipient where required for delivery.
• Order and Transaction Data: Information relating to the products purchased, order date and time, method of payment (note: payment card details are processed securely by third-party providers and are not stored by us), and any delivery instructions.
• Communication Data: Correspondence records relating to your queries, feedback, or complaints submitted to us by telephone, in person, or through web forms.
• Usage Data: Information about how you interact with our services, which may include anonymous data collected via website analytics. This does not include any information through which you could be individually identified.

The Lawful Basis for Processing Your Data

We only collect and process personal data when we have a lawful basis for doing so, as defined under GDPR. The primary lawful bases that apply to our processing activities are as follows:

• Contractual Necessity: We process your data to fulfil and manage your order, deliver floral arrangements, and communicate about your purchase. This processing is necessary to perform our contract with you when you place an order.
• Legal Obligation: In certain cases, we may need to process or retain your information to comply with applicable laws and regulations, such as tax and accounting requirements.
• Legitimate Interests: We may process personal data for our legitimate business interests, for example, to improve our services, protect against fraud, or to respond to your queries. We always consider your rights and interests before processing data in this manner.
• Consent: Where required, we may ask for your explicit consent for specific processing activities, such as for marketing communications, and you have the right to withdraw consent at any time.

How We Use and Share Your Data

Your personal data is used solely for the purposes for which it was collected, including:

• Processing and fulfilling your order, including arranging delivery of your floral gifts.
• Contacting you about your order or to address any queries or issues related to your order.
• Managing payments and refunds with the help of secure third-party payment processors.
• Complying with legal and regulatory obligations.
• Improving the quality and safety of our services.

Your data may be shared with trusted third-party service providers ("processors") only insofar as this is necessary to complete your order, facilitate delivery, manage payments, or provide our services to you. Our processors include:

• Payment service providers for secure transaction processing;
• Delivery partners and couriers for arranging delivery to your stipulated address;
• IT service providers for maintaining our website and information systems.

All third-party processors are contractually bound to protect your data, act only on our instructions, and never use your data for their own purposes.

How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The general retention periods are as follows:

• Order Information: Held for up to seven years to align with tax and accounting regulations.
• Contact and Identity Data: Stored securely and deleted once it is no longer needed, unless you request otherwise.
• Marketing Data: Held for as long as you consent to receive marketing information from us; you may opt out at any time.

When your personal data is no longer required, we will delete it securely in accordance with our data retention policy.

Your Rights Under GDPR

As a data subject, you have several important rights under GDPR in relation to your personal data. These include:

• The right to be informed about how your data is collected and used;
• The right to access your personal data we hold about you;
• The right to rectification if any data is inaccurate or incomplete;
• The right to erasure of your personal data, subject to legal limitations;
• The right to restrict processing in certain circumstances;
• The right to data portability where applicable;
• The right to object to certain types of processing, such as direct marketing;
• The right not to be subject to automated decision-making or profiling.

To exercise any of these rights, you may submit a written request. We will respond within the timelines set out by law and will need to verify your identity before we release any personal data.

Security of Your Information

We take the security of your personal information very seriously. We have implemented appropriate organisational and technical measures to safeguard your data against unauthorised access, loss, alteration, or disclosure. These measures are reviewed regularly and updated where necessary.

Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect or process personal data relating to children without verifiable parental consent.

Policy Applicability

This Privacy Policy applies to all customers placing orders with Florist Sydenham Hill from Sydenham Hill and its surrounding districts. By using our services or placing an order, you acknowledge that you have read and understood this policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. The latest version will always be available in our store and on request. You are encouraged to review this policy periodically to stay informed about how we protect your personal information.

If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact our data protection team for further assistance.