Florist Anerley Privacy Policy for Customers in Anerley & Surrounding Areas

Introduction

This Privacy Policy explains how Florist Anerley ('we', 'us', 'our') collects, uses, stores, and protects your personal information in accordance with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018. This policy applies to all customers placing orders with Florist Anerley from Anerley and surrounding districts. Please read this document carefully to understand your rights relating to your personal data and our obligations as a data controller.

What Personal Data We Collect

When you place an order with Florist Anerley, we may collect the following categories of personal data:

• Contact Details: Name, billing address, delivery address, phone number, and (optionally) email address.
• Order Information: Details of your flower order, card messages, and delivery instructions.
• Payment Information: Necessary payment data (such as card details), processed securely by payment providers; we do not store complete card details on our systems.
• Correspondence: Records of communication with you regarding your order or customer service queries.
• Website Usage Data: Technical details such as your IP address, browser type, and access times may be collected automatically for security and analytic purposes.

Lawful Basis for Processing Your Data

Florist Anerley processes your personal data under the following lawful bases as defined by the GDPR:

• Contractual Necessity: Processing is essential to fulfill our contract with you, such as delivering your order or contacting you about your purchase.
• Legal Obligations: We may need to retain records for tax or compliance reasons.
• Legitimate Interests: We have a legitimate interest in using your information to improve our services, handle correspondence, and prevent fraud, provided these interests are not overridden by your rights and interests.
• Consent: When required, such as for certain marketing communications, we will ask for your consent and allow you to withdraw it at any time.

How We Use Your Data

Your data will be used for the following purposes:

• To process and deliver your flower orders, including the transmission of delivery information to couriers or florists involved in fulfilling your order.
• To communicate with you about your orders, provide updates, and respond to customer service requests.
• To facilitate secure payment processes via trusted payment providers.
• To comply with legal and regulatory requirements.
• To improve our products, services, and website functionality through analytics.
• For internal record keeping and administrative purposes.
• With your explicit consent, to send you marketing information or promotional offers related to our services. You can opt out at any time.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including compliance with legal, tax, accounting, or reporting requirements. Typically, order information and correspondence may be held for up to six years, in line with statutory retention periods. After this period, or upon your legitimate request, your data will be securely deleted or anonymised unless we are required by law to retain it for longer.

Processors and Third-Party Access

We may use carefully selected third-party processors to provide aspects of our service, including payment processing, order management, delivery services, and website hosting. These processors may access your data only as required to perform their functions and are contractually obliged to handle your data in compliance with GDPR and this policy.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data may be disclosed to authorities where required by law or to protect our rights and property.

How Your Data Is Protected

Florist Anerley takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against theft, unauthorised access, alteration, or disclosure. This includes regularly reviewing our security practices and ensuring any staff or partners with access to personal data are fully trained and committed to safeguarding your privacy.

Your Rights

As a data subject under GDPR, you have the following rights concerning your personal data:

• Right of Access: You can request confirmation as to whether we process your data and obtain a copy of your information.
• Right to Rectification: You may request that inaccurate or incomplete data be corrected.
• Right to Erasure: In certain cases, you have the right to request deletion of your data ("the right to be forgotten").
• Right to Restriction: You can ask for the restriction or suppression of your personal data processing under specific circumstances.
• Right to Data Portability: You may request transfer of your data to yourself or another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, or if you have any queries about your personal data or this policy, please contact our customer service team. We will respond to your requests promptly in accordance with data protection law.

Policy Updates

Florist Anerley may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on our website with the effective date. Please check regularly to stay informed about how we handle your data.

Contact & Complaints

If you have any unresolved concerns regarding our use of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

Thank you for trusting Florist Anerley with your personal data and for reviewing our Privacy Policy.