Florist Enfield Wash Customer Privacy Policy

Introduction

This Privacy Policy explains how Florist Enfield Wash ("we", "us" or "our") collects, uses, stores, and safeguards the personal information of customers who place orders from Enfield Wash and the surrounding districts. We are committed to protecting your privacy and process your personal data in compliance with the UK General Data Protection Regulation (GDPR) and related legislation.

Scope of Policy

This policy applies to all individuals who interact with Florist Enfield Wash as customers, including but not limited to placing and tracking orders, making payments, and contacting customer support. The policy covers data obtained through our website, phone orders, or in-person within Enfield Wash and adjacent areas.

What Data We Collect

When you place an order or engage with our services, we collect various types of personal information, including:

• Identity Information: Name, billing address, delivery address.
• Contact Information: Telephone number, and (where provided) email address.
• Order Details: Products ordered, card messages, delivery requests or instructions.
• Payment Information: Transaction details, payment method (e.g., last four digits of payment card, not full card details).
• Correspondence: Any information you provide in communications with us (e.g., feedback, complaints, or order enquiries).
• Technical Data: Anonymous web usage analytics such as IP address, browser type, and access times, if using our website.

We do not knowingly collect or process sensitive personal data (special category data) unless it is voluntarily provided for a specific purpose and explicit consent is given.

Lawful Basis for Processing

Florist Enfield Wash processes your personal data under the following lawful bases as set out in GDPR:

• Contractual Necessity: To process and fulfil your order, including communicating order status, managing deliveries, and handling returns or enquiries.
• Legal Obligation: To comply with applicable laws, such as record-keeping for tax, accounting, and legal compliance purposes.
• Legitimate Interests: To continuously improve our services, maintain business records, promote security, prevent fraud, or pursue legal claims, provided your rights and interests do not override these interests.
• Consent: We may seek your explicit consent before using your data for direct marketing or other purposes where required by law. You have the right to withdraw such consent at any time.

How We Use Your Information

We use your personal data for the following purposes:

• Processing and delivering your orders accurately and on time.
• Sending transactional communications, such as order confirmations and updates.
• Responding to enquiries, feedback, or complaints.
• Maintaining internal records for reporting and audit purposes.
• Complying with legal obligations, such as financial record keeping.
• Monitoring website usage for analytics and service improvement (where applicable).
• Direct marketing activities, where legally permitted and agreed by you.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including for satisfying legal, regulatory, tax, accounting, or reporting requirements. Typically, we keep customer order and transaction data for up to seven years to comply with financial record-keeping laws, after which it is securely erased or anonymised. Where no statutory retention period applies, we periodically review the data and securely delete it when no longer needed.

Data Processors and Third Parties

We may share necessary elements of your personal information with trusted third-party processors who assist us in delivering our services, such as:

• Payment service providers for secure processing of financial transactions.
• Delivery couriers to fulfil your order and provide tracking where needed.
• IT service providers supporting our business systems.
• Professional advisers (accountants, legal advisers) for compliance and legal reasons.

All third-party processors are required to respect the security of your personal data and to treat it in accordance with the law. They may only process your data for specified purposes and in accordance with our instructions. We do not sell or rent your personal data to third parties for marketing purposes.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct or update inaccurate or incomplete information.
• Right to Erasure: You can request the deletion of your data in certain circumstances (also known as the 'right to be forgotten').
• Right to Restrict Processing: You may ask us to restrict the use of your data in some cases.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used electronic format.
• Right to Object: You can object to our processing your data where we rely on legitimate interests or direct marketing.
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw this at any time.

To exercise these rights, please contact us using the details provided on our website or at our business premises. We may ask for proof of identity before fulfilling any request to protect your privacy and security. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has not been managed lawfully.

Security Measures

We take appropriate security measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration. These include physical security at our premises, secure IT systems, and restricting access to personal data to authorised staff and processors only.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, technology, or legal requirements. The latest version will be available in-store and on our website. Please review this policy regularly to remain informed about how your data is protected.

Contact and Questions

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us using the details published at our business premises or via our website. We are committed to addressing any issues promptly and transparently.