Privacy & Data Use Policy – Florist Cambridge Heath

Your Privacy at Florist Cambridge Heath

Privacy Policy for Customers of Florist Cambridge Heath

This privacy policy explains how Florist Cambridge Heath collects, uses, stores, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all individuals who place orders with us, whether for delivery or collection, in Cambridge Heath and the surrounding districts. Your privacy and trust are of utmost importance to us, and we are committed to safeguarding your personal data.

What Data We Collect

When you place an order with Florist Cambridge Heath, we may collect and process the following types of information:

Personal identification data: such as your name and title.
Contact information: including your address, delivery address, and telephone number if provided.
Order details: including the selected products, any card messages, special delivery instructions, and recipient information (name and delivery address).
Payment information: such as details needed to process your payment, though all payment data is handled securely and is not stored unless required for transaction traceability.
Communication records: e.g., correspondence regarding your orders or customer support queries.
Technical data: such as IP address, browser type, and usage data, collected automatically when you interact with our website (if applicable).

Lawful Basis for Data Processing

We collect and process your personal data on the following lawful bases:

Contractual necessity: To process and fulfil your order, including delivery and customer service.
Legal obligation: To comply with laws applicable to business record keeping and financial transactions.
Legitimate interests: To improve our services, handle enquiries and complaints, and prevent fraud.
Consent: For specific optional processing, such as sending you marketing communications (only where we have your explicit permission).

How We Use Your Data

Your data is used for the following purposes:

Processing and fulfilling orders you place with us.
Delivering floral gifts and ensuring accurate delivery logistics.
Providing customer service and responding to your queries or requests.
Managing payments, refunds, or disputes.
Maintaining internal records and invoicing.
Improving our products, services, and your customer experience.
Contacting you regarding your order status or similar service updates.
Complying with legal, taxation, and accounting obligations.

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy or as required by applicable laws. Typically, customer and transaction records are kept for up to seven years to meet financial and legal obligations. Where data is no longer required, it is securely deleted or anonymised. Payment card information is never stored beyond the completion of the transaction unless needed for refunds or compliance purposes, in which case it is handled according to high security standards.

Information Sharing and Data Processors

Florist Cambridge Heath does not sell or rent your personal information to third parties. However, your data may be shared with third-party service providers and processors, only to the extent necessary to deliver our services. These may include:

Payment processors to handle transactions securely.
Delivery partners or couriers to fulfil your orders.
IT service providers who host or maintain our systems and website.
Professional advisers, such as accountants or legal advisors, where required by law.

All third-party service providers are carefully selected and required to handle your data in accordance with GDPR requirements. They may only use your information under our instruction and are obligated to implement measures to protect your data.

User Rights under GDPR

As a customer, you have several rights over your personal data, including:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct any incomplete or inaccurate information.
Right to erasure: You are entitled to request deletion of your information where there is no longer a legal basis for retention.
Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
Right to object: You have the right to object to certain types of processing, such as direct marketing.
Right to data portability: You may request a copy of your data in a commonly used digital format to transfer to another service provider.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time.
Right to lodge a complaint: You have the right to complain to a supervisory authority if you believe your data is not being handled fairly or lawfully.

To exercise any of these rights, please contact us using the appropriate contact method. We may require you to verify your identity before processing your request. We strive to respond promptly to all valid requests.

Data Security

Your personal information is treated with strict confidentiality. We employ physical, electronic, and managerial procedures to safeguard and secure the information we collect, including encrypted transmission and secure storage. Access to customer data is limited to authorised personnel only.

Changes to this Privacy Policy

Florist Cambridge Heath may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. The most current version will always be available at the point of sale and on our website if applicable. Customers placing orders in Cambridge Heath and surrounding districts are advised to review this policy regularly for any changes.

Contact Information

If you have questions about this Privacy Policy or your personal data, please get in touch using the contact form provided on our website or by other contact methods specified at the point of purchase.