Florist Upper Norwood Privacy Policy

Our Commitment to Your Privacy

At Florist Upper Norwood, we understand that your privacy is important. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to any individual placing an order with Florist Upper Norwood from Upper Norwood and the surrounding districts.

Who We Are

Florist Upper Norwood is a retail provider of floral products, serving customers located in Upper Norwood and nearby districts. For the purposes of data protection legislation, Florist Upper Norwood is the ‘controller’ of your personal data. This means we determine how and why your data is processed in connection with the orders you place.

What Data We Collect

To fulfil your flower orders and provide customer service, we collect the following personal data:

  • Identity Data: Your full name and, if placing an order on behalf of another, their name.
  • Contact Data: Delivery and billing addresses, postcode, and, if provided, phone number (for delivery or customer service).
  • Order Details: Order information, such as items selected, messages for the recipient, and delivery date.
  • Payment Data: Limited payment information, such as payment method and confirmation of payment completion (note: we do not store full card details).
  • Device and Technical Data: Information about your device, browser, and how you use our website for analytics and website security.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to process your personal data. Florist Upper Norwood processes your data on the following bases:

  • Contractual Necessity: Processing your personal information is necessary to fulfil your order, including delivery, payment processing, and customer service.
  • Legal Obligations: We may process your data to comply with applicable laws (e.g., accounting regulations or fraud prevention).
  • Legitimate Interests: We may use your data to improve our services, address feedback or complaints, and conduct minimal website analysis, always ensuring that our interests do not override your rights and freedoms.
  • Consent: In instances where we rely on your consent (such as marketing, if applicable), you have the right to withdraw such consent at any time.

How We Use Your Data

Florist Upper Norwood uses your personal information to:

  • Process and deliver your orders accurately and promptly, including notifying you of order status.
  • Provide customer support or respond to any queries you contact us about.
  • Comply with our regulatory and legal obligations.
  • Improve our website, services, and customer experience.

How Long We Retain Your Data

We only keep your personal data for as long as necessary to fulfil the purposes described in this policy.

  • Order Records: Personal data related to your order is typically kept for up to 6 years to comply with accounting and legal requirements.
  • Marketing Data: If you have provided explicit consent for marketing, we will retain your contact information until you withdraw your consent or request deletion.
  • Technical Data: Analytical and technical data is usually anonymised and retained for a maximum of 2 years for improvement of our services.

Upon expiry of the relevant retention period, your personal data will be securely deleted or anonymised.

Data Processors and Sharing Your Data

Florist Upper Norwood works with a limited number of trusted third-party service providers, known as data processors, for the following purposes:

  • Payment processing (we do not store your full payment card details).
  • Website hosting, analytics, and security services.
  • Delivery and logistics support.
  • Email communication relevant to your order.

All processors are contractually bound to protect your data in compliance with GDPR. We will never sell your data or share it for marketing with third parties.

Your Rights Under GDPR

As a customer located in Upper Norwood or surrounding districts, you have the following rights regarding your personal data:

  • Access: You can request a copy of your personal data that we hold.
  • Rectification: You can ask us to correct or update any inaccurate or incomplete data.
  • Erasure: You can request the deletion of your personal data, subject to laws requiring us to keep certain records.
  • Restriction: You can request limited processing of your data in certain circumstances.
  • Objection: You can object to processing based on legitimate interests or direct marketing.
  • Portability: You have the right to receive a copy of your data in a commonly used format for transferring elsewhere.
  • Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.

To exercise your rights, please contact us directly using the contact information provided on our website or order receipts. We may ask for proof of identity before fulfilling your request.

Data Security

We take appropriate technical and organisational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, or unauthorised access. This includes encryption of payment data, staff training, and regular security assessments.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices or regulatory requirements. We encourage you to review it periodically to stay informed about how we protect your personal data.

Contacting Florist Upper Norwood

If you have questions about this policy or wish to exercise any of your rights, please contact us using the details available on our website or on your order confirmations. We aim to respond to all data requests within one calendar month.