Chingford Florist Privacy Policy Overview
Introduction
This Privacy Policy details how Chingford Florist collects, uses, stores, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Chingford Florist from Chingford and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal information is handled transparently and with care.
What Data We Collect
When you place an order with Chingford Florist or contact us regarding our products and services, we may collect and process the following types of personal data:
- Contact Details: Name, address, phone number, and (if provided) email address.
- Order Information: Details of your floral orders, delivery instructions, recipient’s name and address, and any custom messages you may include.
- Payment Information: Payment details processed via our selected payment processor (we do not store your complete financial data, but may retain proof of payment or transaction references).
- Communications: Any correspondence you have with us, such as queries or feedback via telephone, website contact forms, or postal mail.
- Website Usage Data: Information collected about your use of our website, such as IP address, device type, and browsing behaviour (for example, through cookies, where applicable and with consent).
Lawful Basis for Processing
We process your personal data under the following lawful bases as set out by the GDPR:
- Contractual necessity: To process and deliver your orders or provide requested services.
- Legitimate interests: For administrative purposes, to improve our services, prevent fraud, and ensure the security of our operations.
- Legal obligations: To fulfil obligations under applicable laws and regulations (for example, financial recordkeeping and tax purposes).
- Consent: Where required, for example, when sending marketing communications (which will only be sent if you have opted in, and you may withdraw your consent at any time).
How We Use Your Data
Your personal information enables us to:
- Process and fulfil floral orders, including delivery to specified recipients.
- Arrange payments and keep records of transactions.
- Communicate with you regarding orders, requests, or feedback.
- Maintain business records for accountability and legal compliance.
- Improve our website, products, and customer service.
Data Retention
We retain personal data only for as long as necessary, based on the purposes outlined in this Privacy Policy and legal requirements:
- Order records and related financial information are retained for up to 7 years to comply with financial and tax regulations.
- Contact and delivery details are kept for up to 2 years following your last order for customer service and administrative purposes, unless otherwise required for ongoing service queries.
- Website usage data is retained according to our cookie management policy and applicable laws.
- Where consent has been obtained for marketing, your data is held until you withdraw consent or opt out.
Once the applicable retention periods have expired, your data will either be securely deleted or anonymised so that it can no longer be associated with you.
Data Processors and Sharing Your Information
We may share your personal information with trusted service providers and third parties who process data on our behalf. This may include:
- Payment processors to authorise and manage payments.
- Delivery partners involved in delivering your floral orders to the specified recipients.
- IT support services that assist in maintaining our customer data and website infrastructure.
- Professional advisers for legal, tax, or regulatory matters.
All third-party processors are bound by contractual obligations to protect your personal information and use it only in accordance with our instructions and the law. Your information is never sold or shared for any unrelated marketing purposes.
Your Rights Under GDPR
As a customer of Chingford Florist, you have the following rights regarding your personal data:
- Right to access: You may request confirmation and a copy of the personal data we hold about you.
- Right to rectification: You have the right to ask us to correct inaccurate or incomplete information.
- Right to erasure: In certain circumstances, you may request that we delete your personal data (subject to legal or contractual restrictions).
- Right to restrict processing: You have the right to ask us to limit the way we use your data in specific situations.
- Right to object: You may object to our processing of your data where we rely on legitimate interests, or for purposes such as direct marketing.
- Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, and machine-readable format.
- Right to withdraw consent: If processing is based on your consent, you may withdraw that consent at any time.
- Right to lodge a complaint: If you believe we have not handled your data correctly, you have the right to file a complaint with the relevant supervisory authority.
To exercise any of these rights, please contact us using the details provided on our website or in your order confirmation documentation.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our operations or legal obligations. The latest version will always be available on our website. We encourage you to review this policy periodically to stay informed about how we protect your data.
Contacting Chingford Florist
If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact us using the methods indicated on our website or in your order confirmation. We are committed to working with you to resolve any issues or clarify any aspects of our data practices.