Florist Shepherd's Bush Privacy Policy

Introduction

At Florist Shepherd's Bush, we are dedicated to protecting the privacy of our customers. This Privacy Policy outlines the personal data we collect, how we lawfully use and protect it, the purposes for processing, your legal rights, and our commitment to complying with the General Data Protection Regulation (GDPR). This policy applies to all individuals placing Florist Shepherd's Bush orders within Shepherd's Bush and the surrounding districts.

What Data We Collect

To provide our services, we may collect and process the following categories of personal data:

  • Identification Data: Such as your full name.
  • Contact Details: Including your address, postcode, delivery address (if different), and contact number.
  • Order Details: Information about your order, such as flower selection, occasion, delivery instructions, and recipient’s name/contact (if different from purchaser).
  • Payment Information: Payment transaction details processed securely by our third-party payment processor. We do not store your payment card details.
  • Communication Data: Records of correspondence, instructions, or feedback you provide by telephone, in writing, or through our website.
  • Technical Data: When you browse our website, we may collect data such as IP address, browser type, device information, and cookies for site operation and analytics purposes.

Lawful Basis for Processing

We process personal data only where we have a lawful basis, as required by GDPR. These include:

  • Contractual Necessity: To process your order, deliver products, and provide customer service.
  • Legal Obligation: To comply with applicable laws and regulations, such as tax or accounting requirements.
  • Legitimate Interest: To improve our service, respond to enquiries, prevent fraud, and ensure the security of our website and operations. Where legitimate interest is relied upon, we ensure it does not override your fundamental data protection rights.
  • Consent: Where required, such as for sending certain marketing communications or where you provide special instructions involving personal information of others (e.g., recipient details). You can withdraw your consent at any time.

How We Use Your Personal Data

Your data is used solely for Florist Shepherd's Bush operations, including:

  • Processing and fulfilling your flower order.
  • Managing delivery and addressing specific delivery instructions.
  • Handling customer queries, requests, or complaints.
  • Maintaining accurate records for accounting and compliance purposes.
  • Enhancing our products and customer experience, including quality control and customer feedback.

Data Retention

We retain your personal information only as long as is necessary for the purposes it was collected, including for the fulfilment of orders, after-sales support, compliance with our legal obligations, and dispute resolution. The retention period may vary depending on the type of data and applicable laws. Generally, we keep order records for up to six years in accordance with tax and accounting regulations. After this period, data is securely deleted or anonymised.

Processors and Data Sharing

Your personal data may be processed by selected third parties, known as 'processors', only to the extent necessary to fulfil our services:

  • Payment Processors: To facilitate secure payment transactions. These processors are required to comply with stringent data security and privacy obligations.
  • Delivery Partners: To ensure safe delivery of floristry orders to recipients within Shepherd's Bush and adjacent districts.
  • Technical Service Providers: Such as website hosting, analytics, and IT support. These entities may have access to limited data strictly for service provision and system security.

We do not sell your personal data to third parties. Any sharing is minimal, strictly for operational purposes, and governed by appropriate agreements and safeguards.

Data Security

We adopt a range of technical and organisational measures to protect your information against accidental loss, unauthorised access, misuse, alteration, or disclosure. This includes securing our IT systems, restricting data access to trained personnel only, and regularly reviewing our security procedures. Where data is processed by suppliers, we ensure they uphold adequate security standards meeting GDPR requirements.

User Rights Under GDPR

As a data subject, you have the following rights in respect of your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data where there is no lawful basis for continued retention.
  • Restriction: Request restriction or suspension of processing in certain circumstances.
  • Data Portability: Receive your data in a structured, commonly-used, machine-readable format for transfer to another service provider, where applicable.
  • Objection: Object to certain types of processing such as direct marketing or where processing is based on legitimate interests.
  • Withdraw Consent: Withdraw your consent at any time where consent is the basis for processing. Withdrawing consent does not affect the lawfulness of processing prior to withdrawal.
  • Complain: You have the right to lodge a complaint with a data protection authority if you believe your data rights have been infringed.

To exercise any of these rights, please contact us using our website contact form or postal address as specified on our website. Requests will be addressed promptly, in line with legal requirements.

International Data Transfers

Your personal data is stored and processed within the United Kingdom. In the event that data is processed outside the UK or European Economic Area, we will ensure appropriate safeguards are in place so that your data remains protected to the standard required by applicable law.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in law, regulation, or our operations. Any significant changes will be communicated to customers by website notice or at the point of order. We encourage you to review this policy regularly for the latest information on our privacy practices.

Contacting Us

If you have questions about this Privacy Policy, our data processing practices, or wish to exercise your privacy rights, please contact us using the details provided on our website. We are committed to ensuring your data is handled securely, lawfully, and transparently at all times.