Florists Croydon Privacy Policy

Introduction

At Florists Croydon, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you place orders in Croydon and the surrounding districts. We are committed to processing your information in accordance with the UK General Data Protection Regulation (GDPR), and we aim to be transparent about our practices so that you can make informed decisions about sharing your data with us.

Who This Policy Applies To

This policy applies to all customers who place orders for Florists Croydon’s products and services, whether through our website, by phone, or in person, and who reside in Croydon or nearby districts where our services are available. This policy does not cover the practices of companies that Florists Croydon does not own or control, or individuals that we do not employ or manage.

What Data We Collect

We collect various types of personal data depending on how you interact with us and the services you use. This typically includes:

• Contact Information: Name, delivery address, recipient’s name and address (if different), and phone numbers.
• Order Details: Purchase history, products ordered, delivery notes or preferences, and payment method (note: full payment card details are not stored).
• Communication Data: Records of correspondence, queries, customer support, and feedback.
• Technical Data: IP address, device information, and browsing activity on our website (collected via cookies, where applicable and with your consent).

Lawful Basis for Processing Personal Data

Under the GDPR, we are required to have a lawful basis for processing your data. We rely on the following legal grounds:

• Contractual Necessity: Most of the data we collect is required to process and deliver your order and to fulfill our contractual obligations towards you.
• Legal Obligation: We may process certain data where necessary to comply with legal requirements, such as record keeping for tax purposes.
• Legitimate Interests: We may use your data for our legitimate business interests, such as improving our services, responding to your queries, or sending service updates. We always balance this against your rights and freedoms.
• Consent: For certain marketing communications or where cookies collect personal data, we rely on your explicit consent. You are always free to withdraw consent at any time.

How We Use Your Information

Florists Croydon uses your information for the following purposes:

• Processing and fulfilling your orders, including delivery arrangements
• Providing customer support and responding to your enquiries
• Improving our services, products, and website experience
• Complying with our legal and regulatory obligations
• With your consent, keeping you informed of promotions, offers, or news related to Florists Croydon

Data Retention

We retain your personal data only as long as is necessary for the purposes outlined above. Typically, customer data relating to orders is held for up to seven years, in line with legal and accounting requirements. If you register an account with us, your account data will be kept for as long as your account remains active. Where you have given consent for marketing communications, we will retain your contact details until you unsubscribe or withdraw consent.

Once the retention period has elapsed, or upon your request where legally permitted, your data is securely deleted or anonymised.

Sharing Data with Processors

We sometimes share your information with third-party service providers who act as data processors. These may include:

• Delivery and courier partners to ensure your order reaches its destination
• Payment processing providers to facilitate secure transactions
• IT service providers who support our website and customer databases
• Professional advisors (such as accountants or legal consultants), where necessary

All processors are required to act only on our instructions, treat your information securely, and comply fully with data protection laws. We do not sell or rent your personal data to third parties, nor do we share it outside the purposes listed in this policy.

Your Rights Under GDPR

The GDPR grants you a range of rights regarding the personal data we hold about you. These include:

• Right to Access: You can ask for a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete information.
• Right to Erasure: You may ask for your data to be deleted where it is no longer necessary or if you withdraw consent.
• Right to Restrict Processing: You can ask us to restrict how we use your data in certain circumstances.
• Right to Data Portability: You can request a copy of your information in a commonly used format for transfer to another provider.
• Right to Object: You can object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on your consent for data processing, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the methods outlined at the end of this policy. We will respond to all legitimate requests promptly and in accordance with applicable law.

Data Security and Protection

We take the security of your personal data seriously. We implement appropriate technical and organisational security measures to protect against unauthorised access, loss, destruction, or disclosure. These measures include secure servers, encrypted transmissions, and restricted access to personal data within our team. Where we engage third-party processors, we ensure they maintain similarly high standards of security and confidentiality.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our services or legal requirements. The most current version will always be available to customers and will take effect immediately upon publication. We encourage you to review this policy regularly to stay informed of how we are protecting your data.

Contacting Us

If you have any questions, concerns, or would like to exercise your GDPR rights relating to your personal data at Florists Croydon, please get in touch using the contact details published on our website or through your usual method of communication with us. We are committed to resolving any issues quickly and transparently to your satisfaction.