Chiswick Florist Privacy Policy Overview

Introduction

This Privacy Policy describes how Chiswick Florist collects, uses, stores, and protects your personal data as a customer. It applies to all individuals placing orders with Chiswick Florist within Chiswick and its surrounding districts. We are committed to safeguarding your privacy and ensuring your personal information is protected in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws.

Personal Data We Collect

When you place an order with Chiswick Florist, we collect and process certain personal information required to fulfil your request and provide our services. The types of personal data we collect can include:

• Contact Information: Name, delivery address, billing address, phone number
• Order Details: Recipient’s name, recipient’s address, recipient’s phone number, card messages, particular product preferences
• Payment Details: Payment method, transaction reference (we do not store your full payment card details)
• Communication History: Emails and correspondence regarding your orders and inquiries
• Website Usage Data: IP address, browser type, and usage information collected through cookies (when applicable)

We do not knowingly collect data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us to arrange for its deletion.

Lawful Basis for Using Your Information

Under GDPR, we must have a lawful basis to process your personal data. Chiswick Florist primarily uses these bases:

• Contractual Necessity: Most of the information we collect is required to process and deliver your orders and provide the requested services.
• Legal Obligations: Some data is necessary for complying with laws, such as financial and record-keeping requirements.
• Legitimate Interests: We may use your contact details to communicate order updates, follow up on orders, or request feedback, where these communications are not marketing in nature and do not override your rights.
• Consent: Where required by law, such as for certain types of marketing communications, we will request your explicit consent before processing your data for these purposes.

How We Use Your Personal Data

Your personal information is used for purposes such as:

• Processing and delivering your florist orders
• Responding to your inquiries and providing customer support
• Handling payments and refunds
• Maintaining our financial and business records
• Improving our services and understanding customer needs through internal analytics
• Sending updates about your order status
• Upon receiving your consent, sending occasional marketing or promotional communications regarding our offerings

Our Data Retention Policy

We retain your personal data only as long as necessary to fulfil the purposes outlined above:

• Order records and related personal data are typically retained for up to 6 years, in line with legal and accounting requirements.
• Communications and correspondence may be kept for up to 2 years for customer service purposes.
• Cookies and website usage data are retained in line with our cookie settings and applicable law.

After these periods, your data will be securely deleted or anonymised. If you request deletion of your data, and if retention is not required for legal reasons, we will respond as soon as possible.

Data Processors and Third Parties

We may share your personal data, where necessary, with trusted third-party providers (“processors”) who help us deliver our services. These include:

• Payment processing and banking service providers
• Delivery and courier services for order fulfilment
• IT service providers who help host and manage our website and systems
• Accounting and business administration services

All processors are required to handle your data in accordance with our instructions, keep it secure, and comply with GDPR. We only share the minimum amount of information necessary.

We do not sell, rent, or trade your personal data with anyone for marketing purposes. If we are required to disclose your information due to a legal requirement, we will do so in line with our legal obligations.

Your Data Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request confirmation and a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your personal data in certain circumstances, such as when it is no longer necessary for our purposes.
• Right to Restrict Processing: You may ask us to temporarily or permanently stop processing all or some of your personal data.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used format for your own use.
• Right to Object: You may object to processing based on legitimate interests or direct marketing.

If you wish to exercise any of these rights, please contact us via the contact details provided on our website. We will respond to your request as soon as possible, and always within applicable regulatory timelines.

How We Protect Your Information

Chiswick Florist uses appropriate technical and organisational measures to ensure your personal data is protected from accidental loss, unauthorised access, disclosure, alteration, or destruction. Access to your personal data is limited to those staff and processors who have a business need to know. All such individuals and entities are subject to confidentiality obligations.

Policy Applicability and Updates

This Privacy Policy applies to all customers placing orders with Chiswick Florist within Chiswick and surrounding areas. We may update or modify this Policy from time to time to reflect changes in our practices or legal requirements. Updated versions will be posted on our website. Your continued use of our services indicates your acceptance of any changes.

Contact and Complaints

If you have concerns regarding how we handle your personal data, or wish to exercise your rights, please get in touch via the contact details provided on our website. If you remain unsatisfied, you may also complain to the Information Commissioner’s Office (ICO) or your local data protection authority.