Our Customer Privacy Policy

Introduction

This Privacy Policy applies to all customers placing orders with Florist West Green from West Green and the surrounding districts. We are committed to protecting your personal data and respecting your privacy according to the General Data Protection Regulation (GDPR). This policy explains how and why we collect, use, retain, and share your data, our lawful basis for processing, and your rights regarding your information.

What Data We Collect

When you order from Florist West Green, we may collect and process the following categories of personal data:

  • Contact Information: Full name, delivery address, and billing address.
  • Order Details: Products requested, delivery instructions, and messages included in your flower orders.
  • Communication Data: Correspondence details when you contact us or respond to our communications.
  • Transaction Data: Payment method (but not card numbers or security information), order history, and purchase amounts.
  • Technical Data: IP address and browser type if ordering via our website for logistical and security purposes.

We do not knowingly collect special category data (sensitive data such as describing health, ethnicity, or religion) as part of our order process. Please avoid including such information in correspondence or order notes.

Lawful Basis for Processing

We only collect and process your personal information when we have a lawful basis under GDPR:

  • Contractual Necessity: Most information is required for us to fulfill your order, such as delivering flowers to the correct address and processing your payment.
  • Legitimate Interests: We may process data to improve our services, ensure security, and manage any enquiries or complaints relating to your order.
  • Legal Obligations: We retain certain data to comply with financial record-keeping and fraud prevention as required by law.
  • Consent: In rare instances, we seek your consent, for example, if you wish to receive marketing communications. Consent can be withdrawn at any time.

How Long We Retain Your Data

Your personal data is kept only as long as necessary for the purposes outlined in this policy, or as required by law:

  • Order and Transaction Data: Retained for up to seven years to comply with legal and accounting obligations.
  • Enquiries and Correspondence: Normally kept for up to two years after your last contact with us, unless longer retention is justifiable for legal purposes.
  • Marketing Data: If you consent to receive marketing communications, your details will be retained until you withdraw consent or unsubscribe.

At the end of the retention period, data is securely deleted or anonymized.

Data Sharing and Processors

Your personal data is only shared with trusted parties as necessary and never sold to third parties for marketing purposes. Main recipient categories include:

  • Payment Processors: Secure providers who process your payment information in compliance with data protection regulations.
  • Delivery Providers: Couriers or drivers who require your delivery address and name to fulfill your order.
  • Technology Providers: Providers of order management, website hosting, and data storage services who process data under our instruction and cannot use your data for other purposes.
  • Legal and Regulatory Authorities: Where required to comply with a legal obligation, court order, or to protect the rights and property of Florist West Green, our staff, or others.

All processors handling your personal data comply with GDPR requirements and are subject to appropriate contractual obligations around data security and confidentiality.

Data Security

We implement appropriate technical and organisational measures to safeguard your data, including encryption where relevant, secure storage, and restricted access to personal information. We continuously review our procedures to help prevent unauthorised access, loss, or misuse.

Your Rights As a Data Subject

You have a number of important rights under GDPR regarding your personal data. These include the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data where there is no lawful reason for its continued processing.
  • Restriction: Ask us to suspend or restrict processing of your data under certain circumstances.
  • Objection: Object to processing based on our legitimate interests, or to direct marketing at any time.
  • Portability: Request transfer of your personal data to another party.
  • Withdraw Consent: Where processing is based on your consent, you can withdraw consent at any time.

To exercise your rights or raise any concerns about how we handle your data, please contact us using the details provided when you placed your order, or as displayed at point of collection or on our website. We will respond within one month, unless your request is particularly complex, in which case we will keep you informed throughout the process.

Policy Applicability

This policy applies to anyone placing an order with Florist West Green from West Green and the surrounding districts. By interacting with our services, you acknowledge and agree to the terms of this privacy policy.

Updates to This Policy

Florist West Green reviews this Privacy Policy from time to time to ensure ongoing compliance with data protection regulations and to reflect changes in our procedures. Updates will take effect once published and will apply to all subsequent interactions and orders.

Contact and Complaints

If you have any queries, concerns, or complaints regarding this policy or your personal data, please contact us using the details provided at your point of purchase or our website. Should you wish, you may also lodge a complaint with a supervisory authority in your country of residence, or where you believe an infringement of data protection law has occurred.