Bexley Florist Privacy Policy: Protecting Your Data

Introduction

This Privacy Policy sets out in detail how Bexley Florist collects, uses, processes, and stores your personal information. It applies to all individuals placing orders with Bexley Florist from Bexley and the surrounding districts. We are committed to safeguarding your privacy and respecting your rights in accordance with the General Data Protection Regulation (GDPR) and associated UK data protection laws.

What Data We Collect

Bexley Florist collects a variety of personal data to process orders, deliver products, and provide customer service. The categories of personal data we may collect include:

  • Identity Data: Name, surname, and where relevant, names of recipients.
  • Contact Data: Postal address, delivery address, telephone number, and order-specific contact information.
  • Transaction Data: Details of your orders, billing information, payment status, and transactional correspondence.
  • Payment Data: Limited payment card information (processed securely through our payment processors; card details are never stored on our systems).
  • Correspondence Data: Any communications you have with us related to your order, enquiries, or feedback.
  • Technical Data: IP address, browser type and version, device information, and access times when interacting with our website (used for security and analytics).

Lawful Basis for Processing Data

We only collect and process your personal data when there is a lawful basis under GDPR. The main legal bases for processing your data include:

  • Contract: Processing necessary for fulfilling an order you have placed with us, including delivery and after-sales support.
  • Legal Obligation: Complying with applicable laws and regulatory requirements, such as keeping accurate records of transactions for tax and auditing purposes.
  • Legitimate Interests: Pursuing our legitimate business interests, such as improving our services, managing and growing our business, and ensuring the security of our website and services, provided these interests do not override your rights and freedoms.
  • Consent: Where we rely on your specific consent for particular uses of your data, such as sending marketing communications, you have the right to withdraw consent at any time.

How We Use Your Personal Data

Bexley Florist uses your personal data for the following purposes:

  • Processing and fulfilling floral and gift orders.
  • Communicating with customers about orders, delivery, and customer service enquiries.
  • Arranging secure payment and issue of receipts or invoices.
  • Maintaining our accounting and tax records as legally required.
  • Improving our website, services, and customer experience.
  • Responding to complaints, requests, and feedback.

We do not profile individuals or make automated decisions based on your data without human intervention.

Data Retention

Bexley Florist retains your personal data only for as long as is necessary for the purposes for which it was collected, including fulfilling orders, resolving disputes, and meeting legal and financial obligations. Typically, personal order data is retained for up to seven years from the date of your last order to comply with tax and accounting requirements. Once data is no longer required, it will be securely deleted or anonymized. We periodically review our data retention practices to ensure they are compliant and justified.

Use of Processors and Data Sharing

To provide our services, we may share your data with trusted third-party service providers (data processors) under strict data protection terms. Examples include:

  • Payment Processors: Securely process payments for your order (we do not store card details ourselves).
  • Delivery Providers: Couriers or partner florists within Bexley and nearby areas, involved in delivering your flowers and gifts.
  • IT Service Providers: Hosting and maintaining our website, email, and other business systems.

All processors are required to keep your data safe and only use it according to our instructions. We do not sell or rent your data to any third parties for marketing purposes. If legally required (e.g. for law enforcement or legal proceedings), we may disclose your information to regulatory bodies or authorities.

Your Rights Under GDPR

You have several rights in respect of your personal data under GDPR:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of incomplete or inaccurate data.
  • Right to Erasure: Request deletion of your data when it is no longer needed, where there are no overriding legitimate grounds.
  • Right to Restrict Processing: Request temporary suspension of processing under certain conditions.
  • Right to Data Portability: Receive a copy of the data in a commonly used format for transfer to another provider.
  • Right to Object: Object to processing under legitimate interests or for direct marketing (if applicable).
  • Right to Withdraw Consent: Where you have given consent, you may withdraw it at any time.

To exercise your rights, you can contact us by mail or in person at our registered business premises. We will respond to your requests as quickly as possible and always within one month, as required by law. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data rights are being infringed.

How We Protect Your Data

Bexley Florist takes data security seriously. We use a combination of strong technical and organizational measures, including secure servers, encrypted connections, restricted access, staff training, and periodic reviews, to ensure your data is protected against unauthorized access, alteration, disclosure, or destruction.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our data processing practices or relevant laws. Any updates will be published on our website, and where appropriate, we will inform you of significant changes. Please check this page periodically for the latest version.

Contact Us

For any questions or concerns about this Privacy Policy, our data practices, or your rights, please get in touch with us using the contact details provided on our website or by visiting our Bexley premises.