Thornton Heath Florist Privacy Policy

Privacy Policy Overview

This Privacy Policy explains how Thornton Heath Florist collects, uses, shares, and protects your personal data when you place orders, either directly or via our website, as a customer based in Thornton Heath and surrounding districts. We are committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. Please read this policy carefully to understand your rights and how we process your information.

Scope of This Policy

This Privacy Policy applies to all customers ordering from Thornton Heath Florist for delivery to Thornton Heath and neighbouring areas. By placing an order with us, you agree to the collection and use of your information in accordance with the terms outlined in this policy.

What Data We Collect

We collect and process various types of personal data, which may include the following:

• Identification Information: Names of the customer and the recipient.
• Contact Information: Delivery and billing addresses, telephone numbers.
• Order Details: Product selections, messages for cards, delivery instructions, and preferred delivery dates.
• Payment Information: Payment card or transaction details (processed securely via our payment service provider).
• Communication Records: Emails or notes from telephone conversations regarding your order.
• Website Usage Data: Information such as browser type, device information, and IP addresses collected via cookies to improve our website and services.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to collect and use your personal data. The lawful bases we rely on are:

• Contract: Processing is necessary to fulfil your order, provide customer support, and manage payments.
• Legal Obligation: To comply with financial and tax reporting obligations.
• Legitimate Interests: For the improvement of our services, fraud prevention, and, when relevant, sending you information about similar products or services.
• Consent: For certain marketing communications, where legally required, we will request your explicit consent in advance.

How We Use Your Data

Thornton Heath Florist uses your data for the following purposes:

• Processing and fulfilling your floral orders, including delivery to the intended recipient.
• Managing payments and refunds.
• Responding to enquiries and providing customer service.
• Complying with legal and regulatory obligations.
• Improving our services and understanding customer preferences.

Data Retention

We retain your personal data only for as long as is necessary to provide our products and services, fulfil our contractual and legal obligations, and resolve any disputes. Typically, order information will be retained for a minimum of six years in accordance with applicable UK tax and accounting laws. After this period, your data will be securely deleted or anonymised.

Third-Party Processors

We may share your personal data with trusted third-party service providers (processors) strictly for the following purposes:

• Payment Processing Providers: To facilitate secure transactions and prevent fraud.
• Couriers and Delivery Partners: To ensure safe and prompt delivery of your flowers.
• IT and Website Support Providers: For system maintenance, data hosting, and technical support.
• Accounting and Legal Advisors: To comply with our statutory obligations.

We require all processors to act in accordance with our instructions, to process your data securely, and not to use your data for any purposes other than those specified in this policy.

How We Protect Your Data

We are committed to maintaining the confidentiality, integrity, and security of your personal data. Security measures include restricted access, encryption, secure storage, regular staff training, and the use of industry-standard safeguards when transferring data to our processors.

Your Rights Under GDPR

You have a number of important rights regarding your personal data under the General Data Protection Regulation. These include:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your data, subject to legal obligations requiring us to retain certain information.
• Right to Restrict Processing: You may request that we limit the way we use your data.
• Right to Data Portability: You may request to receive your data in a structured, commonly used format.
• Right to Object: You may object to the processing of your data for specific purposes, such as direct marketing.
• Right to Withdraw Consent: Where we are relying on consent, you can withdraw this at any time.

To exercise any of these rights, please contact us via our website or written correspondence. We aim to respond to requests within one month, subject to the complexity and number of requests.

Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or relevant legislation. We will publish all changes on this page. We encourage customers to review this policy regularly to stay informed about how we protect your data.

Contact and Complaints

If you have any queries, requests, or concerns regarding this Privacy Policy or your personal data, please contact us at our registered address or through the contact form provided on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has not been processed in accordance with the law.

Thank you for choosing Thornton Heath Florist. We value your trust and are dedicated to handling your personal data respectfully and securely.