Florists Docklands Privacy Policy

Introduction

Your privacy is important to Florists Docklands. This Privacy Policy outlines how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Florists Docklands, whether you are located in Docklands or the surrounding districts.

What Data We Collect

When you place an order or interact with Florists Docklands, we may collect and process the following categories of personal data:

• Identity Information: Name, contact details (address, phone number), and recipient details if you are ordering flowers for someone else.
• Order Details: Products selected, delivery instructions, special requests, and order preferences.
• Payment Information: Transaction data processed via our payment processors (we do not store full card details).
• Communication Data: Correspondence with us regarding orders, enquiries, feedback, or complaints.
• Technical Data: IP address, device type, and related cookies for website functionality and security (where applicable).

Lawful Bases for Processing Your Data

We process your personal data on the following lawful bases, as defined under GDPR:

• Contractual Necessity: To fulfil and deliver your order, process payment, and communicate with you regarding your purchase.
• Legal Obligation: To comply with applicable laws, such as maintaining required records for taxation and accounting purposes.
• Legitimate Interests: To improve our products and services, protect against fraud, and ensure a smooth customer experience. We ensure any data processing under legitimate interests does not override your rights and freedoms.
• Consent: Where required by law (for example, for certain marketing communications), we will seek your explicit consent.

Retention of Your Personal Data

Florists Docklands retains your personal data for no longer than necessary to fulfil the purpose for which it was collected. Our typical retention periods are:

• Order records and related communications: up to 6 years for accounting and legal compliance.
• Marketing data (where consent is given): until you withdraw consent or request erasure.
• Technical and website data: as specified in our cookie controls, typically no longer than 2 years.

After these periods, personal data is securely deleted or anonymised unless we are required by law to retain it for a longer period.

Data Sharing and Processors

We sometimes need to share your personal data with trusted third-party service providers (data processors) who assist us with processing orders and delivering services. These may include:

• Payment processors for secure transactions.
• Courier or delivery services to deliver orders.
• IT and customer management service providers supporting our systems.
• Legal and accounting professionals, if required by law.

All third-party processors are contractually obliged to respect the security and confidentiality of your data and to process it only on our documented instructions. We do not sell or rent your personal data to any third parties.

Your Rights Under GDPR

As a data subject under GDPR, you have several rights regarding your personal data:

• Right to Access: You can request information about the personal data we hold about you and how it is processed.
• Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
• Right to Erasure: You can request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected, or where processing is based on consent that you withdraw.
• Right to Restrict Processing: You can request we temporarily restrict the processing of your data under certain circumstances.
• Right to Data Portability: Where applicable, you can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of your rights, you may contact us using the communication methods provided on our website or written correspondence. We will respond within one month as required by GDPR.

International Data Transfers

Your data is primarily stored and processed within the United Kingdom or the European Economic Area (EEA). Where we use third-party processors outside the EEA, we ensure appropriate safeguards are in place, such as approved standard contractual clauses.

Data Security Measures

Florists Docklands applies strict security measures to protect your personal data from loss, theft, and unauthorised access. These include secure servers, encryption technologies, access controls, and staff data protection training.

Policy Scope and Changes

This Privacy Policy applies to all personal data collected from customers placing orders with Florists Docklands in Docklands and surrounding districts, regardless of the method of order (online, phone, or in-person). We may update this policy from time to time. Updated versions will be made available through our website, and significant changes will be communicated as appropriate.

Further Information

If you have questions about how we protect your privacy or require further information relating to your data and rights, please contact us using the details on our Contact page. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.

Thank you for placing your trust in Florists Docklands.