How Florist Rotherhithe Handles Your Personal Data Responsibly

Florist Rotherhithe Privacy Policy

Introduction

This Privacy Policy explains how Florist Rotherhithe collects, uses, stores, and protects your personal data, and informs you of your rights under the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Rotherhithe from Rotherhithe and nearby districts.

What Data We Collect

When you engage with Florist Rotherhithe, we collect the following types of personal data:

Contact Information: Name, delivery address, contact details (excluding phone and email for this policy).
Order Details: Delivery requests, recipient details, order preferences, and messages with your order.
Payment Information: Limited payment references as provided by payment processors (we do not store your card details).
Website Usage: Technical data such as IP address, browser type, and information collected via cookies and similar technologies for functionality, analytics, and improvement of our services.

Lawful Basis for Processing Personal Data

Florist Rotherhithe processes your personal data only when there is a valid legal basis under GDPR. The primary lawful bases we rely on include:

Contractual Necessity: Processing is required to fulfill your order—including delivery, payment handling, and customer service.
Legal Obligation: We may process personal data to comply with applicable UK laws, tax, and accounting regulations.
Legitimate Interests: To improve our products, communicate relevant service information, and ensure security. We consider and balance any potential impact on you and your rights before processing on this basis.
Consent: When you voluntarily provide optional information (e.g., special delivery instructions or marketing preferences), your consent is requested and you may withdraw it at any time.

How We Use Your Data

Your data is used for the following purposes:

Processing and fulfilling orders, including flower delivery and communication directly related to your order.
Customer support and service improvements.
Maintaining business records for financial and legal compliance.
Internal analytics and operational security.
If you have opted in, to send occasional marketing and promotional materials (which you may opt out of at any time).

Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements.

Orders and Customer Records: Kept for up to seven years to meet tax and accounting obligations, unless a longer retention is required or permitted by law.
Cookies and Usage Data: Retained for up to 24 months for analytics, after which it will be deleted or anonymised.
Marketing Preferences: Retained until you withdraw your consent or request erasure.

Data Processors and Sharing Your Information

Florist Rotherhithe shares your personal data only as necessary with trusted service providers for purposes directly related to your order and business operations. These may include:

Payment processors for secure transaction handling.
Delivery service partners to ensure successful fulfilment of your order.
IT providers for website hosting, analytics, and email communications.

All service providers are contractually obligated to process your data securely and only for the agreed purposes. We do not sell or rent customer data to any third parties. Transfers of data outside the UK are subject to adequate protections to safeguard your information, in compliance with GDPR.

User Rights Under GDPR

As a customer, you have rights regarding your personal data under the GDPR. These include:

Right of Access: You may request to view the data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your data where there is no longer a legal basis for us to hold it.
Right to Restrict Processing: You can limit how we use your data under certain circumstances.
Right to Data Portability: You may request to transfer your data to another service provider, where technically feasible.
Right to Object: You can object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You are entitled to lodge a complaint with the relevant supervisory authority if you feel your privacy rights have been infringed.

To exercise any of these rights, please contact us using the details provided on our website. We will respond promptly and within the timeframes required by law.

Children's Privacy

Florist Rotherhithe does not knowingly collect or process personal data relating to children under the age of 16 for order fulfillment. If we discover that such information has been collected inadvertently, we will take appropriate steps to securely delete it.

Security Measures

We implement appropriate organisational and technical measures to protect your personal data from loss, misuse, or unauthorised access. These include data access restrictions, encryption, regular security assessments, and staff training. While no method of transmission over the Internet is completely secure, we strive to use best practices to safeguard your information.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updated policies will be posted on our website and, where appropriate, notified to you directly. Please review this policy periodically to remain informed about how your data is protected.

Contact Us

If you have any questions about this Privacy Policy or your data, please see our contact information on the website. We are committed to processing personal data lawfully, transparently, and fairly in accordance with GDPR requirements and to providing excellent service to our customers in Rotherhithe and surrounding districts.