De Beauvoir Town Florist Privacy Policy

Scope and Application of this Privacy Policy

This Privacy Policy explains how De Beauvoir Town Florist collects, uses, stores, and protects your personal data when you place orders with us, whether in De Beauvoir Town or adjacent districts. We are committed to full compliance with the UK General Data Protection Regulation (GDPR) and respect the privacy rights of our customers. This Policy applies to all individuals placing orders for floral products and services through our physical locations, telephone orders, or online channels.

Personal Data We Collect

In order to fulfil your orders and provide customer service, De Beauvoir Town Florist collects the following categories of personal data:

  • Identity Data: Includes your name, and if applicable, the names of gift recipients.
  • Contact Data: Includes billing address, delivery address, and in some cases, other contact information provided for delivery purposes.
  • Order and Transaction Data: Details of products or services you have ordered, purchase dates, and transaction history.
  • Payment Data: Contains relevant payment information necessary to process your purchase. We do not store full card details; payment is handled securely by our payment processor.
  • Correspondence: Any communications you send us in relation to your order or our service may be retained to help with customer service.

We do not intentionally collect any special categories of personal data (such as health or ethnicity data) unless specifically required to meet your request, in which case we will request explicit consent.

Lawful Basis for Data Processing

In line with Article 6 of the GDPR, we only process your personal data where there is a lawful basis. Our principal bases for processing are:

  • Contractual Necessity: Processing your data to fulfil floral product and related service orders you place with us.
  • Legal Obligation: Keeping records to demonstrate compliance with legal and tax requirements.
  • Legitimate Interests: Using data to manage our business, ensure effective delivery, improve our offerings, and protect our rights, so long as these interests do not override your privacy rights.
  • Consent: When required, such as for marketing communications, we will ask for your explicit consent, and you may withdraw it at any time.

How We Use Your Data

We use your personal data for the following purposes:

  • Processing and arranging delivery of your orders
  • Communicating with you regarding your order status or customer service requests
  • Maintaining accurate business and financial records
  • Improving our services based on customer feedback
  • Complying with any legal or regulatory requirements

Retention of Your Personal Data

Your personal data will be retained only for as long as necessary to fulfil the purposes set out in this Privacy Policy, to satisfy any legal, accounting, or reporting requirements, or as required by applicable laws. Typically, order and transaction records are kept for up to seven years, in line with statutory duties. Customer correspondence and other related records are generally retained for up to 24 months after the relevant order to ensure effective customer service, unless we are legally required to keep them for longer. Once your data is no longer needed, we will securely erase or anonymise it.

Third-Party Processors and Data Sharing

We work with trusted service providers to assist in processing payments, fulfilling deliveries, or maintaining our electronic records. These third-party processors are only given the minimum personal data necessary and are contractually bound to comply with GDPR, including confidentiality and secure data handling. Examples include payment services providers, delivery couriers, and IT support firms. We do not sell or share your data with other businesses for their marketing purposes. If data is transferred outside the UK or European Economic Area, we ensure proper safeguards are in place as required by law.

Data Security

De Beauvoir Town Florist employs appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Access to your data is restricted to staff and processors who need it to fulfil orders or for support purposes. Where possible, data is pseudonymised or encrypted. We regularly review and update our security policies and procedures.

Your Rights Under GDPR

Under data protection law, you have several important rights:

  • The right to access – You can ask us for a copy of your personal data that we hold.
  • The right to rectification – You can request correction of inaccurate or incomplete data.
  • The right to erasure – You may request your data be deleted when it is no longer required for legitimate purposes.
  • The right to restrict processing – In certain circumstances, you may limit how we use your data.
  • The right to object – You may object to the processing of your data when we rely on legitimate interests as the basis.
  • The right to data portability – You can ask for your data to be transferred to another service provider.
  • The right to withdraw consent – If processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us using the contact details provided at the end of this Policy. We will respond to your request within one calendar month, unless an extension is legally permitted, and in such cases you will be notified.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from minors. Should we learn that we have collected data from someone under this age, we will promptly delete it.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our data handling practices. The "last updated" date will be shown at the end of this Policy. We encourage you to review this page periodically for the latest information.

Contact and Concerns

If you have questions, requests relating to your rights, or concerns regarding your personal data, please contact us using our published contact channels. If our response is not satisfactory, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Last updated: June 2024