Florist Mottingham Privacy Policy

Introduction

This Privacy Policy sets out how Florist Mottingham (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you place an order with us in Mottingham and surrounding districts. We are committed to respecting your privacy and complying with the UK General Data Protection Regulation (GDPR). This policy applies to all customers who place orders through our services, whether online, in-person, or by phone.

What Personal Data We Collect

Florist Mottingham collects only the information necessary to process and deliver your order, provide customer service, and meet legal obligations. The types of personal data we may collect include:

• Identification Data: Full name, delivery recipient’s name
• Contact Data: Delivery address, billing address, phone number (if provided), and in some cases, alternative contact details
• Order Details: Details of your order, any messages to recipients, preferences, and delivery instructions
• Payment Information: Payment method details (such as card type, but not full card numbers as these are processed securely by payment providers)
• Communications: Any correspondence with us (e.g., feedback, special requests)
• Technical Data: IP address, browser type, and information collected automatically through website cookies (for visitors using our online services)

We do not collect or process sensitive personal data as defined by GDPR.

Lawful Basis for Data Processing

Under the GDPR, we must have a valid reason to use your personal data. Our main lawful bases include:

• Contractual Necessity: Processing your data to fulfill and deliver your order, and respond to your queries
• Legal Obligation: Retaining transaction records as required by UK tax laws and providing information to regulatory authorities if required
• Legitimate Interests: Using your data to improve our services, prevent fraud, and ensure the security of our operations
• Consent: Where you have specifically agreed to receive marketing communications from us (you can withdraw consent at any time)

How We Use Your Personal Data

• To process, confirm, and deliver your orders
• To communicate with you regarding your order and answer your queries
• To maintain accurate business records and comply with legal obligations
• To improve user experience and our services
• To send marketing (if you opt-in)

Retention Periods

We retain personal data only for as long as necessary to achieve the purposes outlined in this policy:

• Order Data: Order and related contact data are kept for up to seven years to meet accounting and legal requirements.
• Marketing Data: If you consent to receive marketing, we will retain your details for marketing purposes until you withdraw consent or upon periodic review.
• Technical Data: Technical and cookie data is retained for up to two years or as required for website analytics and security.

After the relevant retention periods, your data is securely deleted or anonymised.

Processors and Data Sharing

We do not sell or exchange your data with third parties for marketing. We may share your data with trusted service providers (data processors) who help us run our business, such as:

• Payment processors to securely handle your payment transactions
• Courier and delivery services to ensure correct and timely delivery of your order
• IT and website support providers who maintain our systems
• Professional advisers (accountants, legal advisors) for compliance purposes

All our data processors are contractually obliged to protect your data and adhere to GDPR standards. We do not transfer your personal data outside the UK or the European Economic Area (EEA) without appropriate safeguards.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request information about what personal data we hold about you
• Right to Rectification: Have incorrect or incomplete data corrected
• Right to Erasure: Request deletion of your data when it is no longer necessary for our purposes (subject to legal requirements)
• Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances
• Right to Data Portability: Receive a copy of your data in a portable format
• Right to Object: Object to processing of your data on certain grounds, including direct marketing
• Right to Withdraw Consent: Withdraw consent to marketing or other processing at any time, where consent was given

If you wish to exercise any of these rights, please contact us using the details provided on our website or at our premises. We typically respond within one month of receiving your request. You may also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data has not been handled properly.

Security of Your Data

We take the security of your personal data seriously. We use appropriate physical, technical, and organisational measures to protect your data against unauthorised access, loss, misuse, alteration, or disclosure. Access to your data is restricted to employees and trusted partners who need it to fulfill their duties. When using third-party processors, we ensure that they also have appropriate security in place.

Children’s Privacy

Our services are not directed at children under 16 and we do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us so that we can delete it.

Changes to Our Privacy Policy

We review our privacy policy regularly and may update it from time to time to reflect changes in our practices or legal obligations. We encourage customers placing orders in Mottingham and surrounding districts to review this policy periodically. The latest version will always be available at our place of business and on our website.

Contacting Us

If you have any questions, concerns, or requests relating to this privacy policy or how your data is handled, please contact us by using the contact information published on our website or visiting us at our premises. We are happy to assist you and address your concerns regarding privacy and data protection.