Privacy Policy for Customers of South Norwood Florist

Introduction

At South Norwood Florist, we are committed to protecting your privacy and personal data. This Privacy Policy explains our approach to handling your information as a customer placing orders with us from South Norwood and the surrounding districts. We value transparency and adhere to applicable data protection legislation, including the UK General Data Protection Regulation (GDPR), ensuring your details are handled securely and lawfully.

Scope of this Privacy Policy

This policy applies to all individuals who are customers of South Norwood Florist and place orders with us online, in person, or by telephone, in South Norwood and adjacent districts. By placing an order, you acknowledge the practices described in this policy regarding your personal data.

What Data We Collect

In order to fulfil your orders and provide our services, we may collect the following categories of personal data:

• Contact Information: Your name, address, and phone number (for both you and any designated gift recipient).
• Order Details: Order history, flower or product preferences, delivery instructions, and card messages.
• Payment Information: Payment transaction details are processed by our authorised payment processors (we do not store full payment card details).
• Communication Records: Correspondence via phone, in-store discussions, or written communication regarding your orders.
• Website Usage Data: When you use our website, technical information such as IP addresses, device type, and browsing activity may be gathered through cookies or similar technologies for performance and security purposes.

Lawful Basis for Processing

South Norwood Florist collects and processes your data on a number of legal grounds as required under GDPR:

• Contractual Necessity: Most data we collect is necessary for the performance of a contract with you (for example, to process, confirm, and deliver your order).
• Legal Obligations: Some data is processed to comply with legal obligations (such as financial record keeping for tax purposes).
• Legitimate Interests: We may process certain data for our legitimate business interests, including quality control, customer support, and limited marketing communications. We always consider your rights and interests when relying on this basis.
• Consent: Where required, we will seek your consent before processing your data, such as opting into receiving promotional material. You may withdraw consent at any time.

How We Use Your Data

Your personal data is used to:

• Process and complete your orders.
• Deliver products to you or your gift recipients as instructed.
• Maintain accurate records for financial and legal purposes.
• Improve our customer service and respond to your enquiries.
• Contact you about your orders or, if you have opted in, with occasional news or promotions.
• Ensure website security and enhance your browsing experience.

Retention of Personal Data

Your personal data is retained only for as long as necessary for the purposes outlined in this policy. Typically, order and contact records are kept for up to seven years in accordance with tax and accounting obligations. Data used for marketing or communication purposes is stored only with your ongoing consent. After these periods, data is securely deleted or anonymised.

Third-Party Processors

South Norwood Florist engages carefully selected third-party processors to facilitate our services:

• Payment Processors: To process payments securely and in compliance with industry standards.
• Website Service Providers: For website hosting, maintenance, and security.
• Delivery Partners: Occasionally, external couriers may be used for order fulfilment during peak times.

All processors act in accordance with written contracts, process your data only as instructed by us, and are obliged to adhere to relevant data protection laws. We do not sell or share your data with other third parties for unrelated marketing or commercial purposes.

Data Security

We implement industry-standard security measures to protect your information against unauthorised access, loss, or misuse. Physical, electronic, and managerial procedures are in place to safeguard your data throughout its life cycle with South Norwood Florist.

Your Data Protection Rights

You have a number of rights under GDPR with respect to your personal data:

• Right of Access: Obtain confirmation of whether we process your data and request a copy.
• Right to Rectification: Request that we correct any errors or incomplete information in your records.
• Right to Erasure ('Right to be Forgotten'): Ask us to delete your data, where legally permissible.
• Right to Restrict Processing: Request a halt on certain processing activities while a complaint is investigated.
• Right to Data Portability: Request to receive your personal data in a commonly used format or ask us to transfer it to another company.
• Right to Object: Object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the usual communication channels (visit our shop or use the contact details provided at the time of your order).

Updates to This Privacy Policy

We may review and update this Privacy Policy periodically to meet legal, business, or technology requirements. Any substantial changes will be brought to your attention via prominent notices at our shop and on our website.

Contact and Complaints

If you have questions or concerns about how your data is handled, please feel free to raise these with us directly. You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been infringed.

Thank you for trusting South Norwood Florist. We are dedicated to respecting your data and your privacy at every stage of our customer relationship.