Privacy Policy for Florist West Drayton Customers

Introduction

This Privacy Policy explains how Florist West Drayton ("we", "us", or "our") collects, uses, stores, and protects the personal data of our customers. This policy applies to all individuals who place orders with Florist West Drayton, whether located in West Drayton or the surrounding districts. We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and all relevant legislation.

What Personal Data We Collect

When you interact with Florist West Drayton, notably when you place an order for flowers or related products, we collect and process certain personal data required to fulfil your order, communicate with you, and improve our services. The types of personal data we may collect include:

• Name: Your first and last name for identification and delivery purposes.
• Contact Details: Telephone number, postal address, and (if provided) email address for communication about your order, invoicing, and delivery.
• Order Details: Items purchased, delivery instructions, recipient details (if different from the customer), purchase history, and occasion notes.
• Payment Information: While we do not store any full card or bank details, we process payment information securely through our payment processor partners.
• Correspondence: Records of any queries, feedback, or correspondence with our customer service team.

Lawful Basis for Processing Your Data

We process your personal data only where we have a lawful basis to do so under the UK GDPR. The lawful bases we rely on include:

• Contract: Processing your data is necessary for the performance of a contract (such as fulfilling your order or managing returns and refunds).
• Legal Obligation: We may need to process certain information to comply with our legal and regulatory obligations.
• Legitimate Interests: We may process your personal data for legitimate business interests, such as improving our services, sending administrative communications, or maintaining records of sales.
• Consent: Where we rely on your consent (for example, for marketing communications), you have the right to withdraw your consent at any time.

How We Use Your Data

Your data is used exclusively for the stated purposes, which may include:

• Processing and delivering your orders.
• Contacting you regarding your order or responding to your enquiries.
• Administering promotions or competitions (where applicable).
• Improving our products, services, and customer experience.
• Complying with legal and regulatory obligations.
• Sending you marketing materials about similar products, provided you have not opted out (you may unsubscribe at any time).

Data Processors and Sharing

To fulfil your order and operate our business, it may be necessary to share your personal data with carefully selected third-party service providers, also known as processors. These may include:

• Payment processing providers who handle your online transactions securely.
• Delivery and courier services to deliver your purchases to the correct address.
• IT service providers who assist in maintaining our website and internal systems.
• Professional advisers such as accountants or auditors, where legally required.

All third-party service providers are contractually required to handle your data securely, act only on our instructions, and comply with data protection legislation. We do not sell or otherwise share your personal data with any third party outside of the purposes stated above.

Data Retention

Your personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected, including fulfilling contractual obligations, complying with legal requirements, and resolving disputes. As a general rule, we retain order, invoicing, and customer communication records for seven (7) years from the fulfilment of each order, in line with HMRC and accounting requirements. After this period, your data will be securely deleted or anonymised, unless a longer retention period is required by law.

How We Protect Your Data

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include secure servers, encryption of sensitive data, regular security reviews, and staff training on data protection requirements.

Your Data Protection Rights

Under the UK GDPR, you have the following rights over your personal data:

• Right to Access: You may request details of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccuracies or complete incomplete personal data.
• Right to Erasure: In certain circumstances, you can ask us to delete your personal data.
• Right to Restrict Processing: You may request a restriction of processing for certain reasons.
• Right to Data Portability: Where applicable, you can request a copy of your data in a commonly used electronic format.
• Right to Object: You may object to processing of your personal data for specific purposes such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us using the details available on our website or in-store. We will respond to your requests in accordance with legal requirements and within statutory timeframes.

Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect or process personal data of children under this age. If we learn that we have mistakenly collected personal information from a child under 16, we will take steps to delete the information as soon as possible.

Policy Updates

We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements, our processing practices, or operational needs. The latest version will always be available on our website, and significant changes will be notified to you where appropriate.

Contact and Complaints

If you have questions regarding this Privacy Policy, concerns about your data, or wish to exercise your rights, please contact us using the information provided on our official contact page or instore. If you are not satisfied with our response, you may refer your concerns to the Information Commissioner’s Office (ICO).