Florist Plumstead Privacy Policy Overview

Introduction

This Privacy Policy explains how Florist Plumstead, serving customers in Plumstead and surrounding districts, collects, uses, stores, and protects your personal information in compliance with the European Union General Data Protection Regulation (GDPR). Your privacy and the security of your personal data are very important to us. This policy applies to everyone placing orders with Florist Plumstead, either in person, by phone, or through our online platforms.

Personal Data We Collect

To fulfil our services and operate efficiently, we may collect and process the following categories of personal data:

• Contact Information: Name, delivery address, phone number, and potentially your email address, provided when placing an order or making an enquiry.
• Order Details: Items ordered, special instructions or messages, order value, and delivery preferences.
• Payment Information: Transaction information (we do not store full payment card details; payment is processed securely by third-party payment processors).
• Correspondence: Any communications or feedback you provide to us via customer service, contact forms, or surveys.
• Technical Data: IP address, device type, and browsing information collected through cookies when using our website, to help improve our services and usability.

Lawful Basis for Processing Your Data

Florist Plumstead processes your personal data only where permitted by applicable laws, including one or more of the following GDPR bases:

• Contractual Necessity: Processing your personal data to manage and complete your orders, provide customer support, and deliver products and services you request.
• Legitimate Interests: Using your data for business development, improving products and services, and preventing fraud, as long as these do not override your fundamental rights and freedoms.
• Legal Obligations: Complying with legal and regulatory requirements, including record-keeping for tax or accounting purposes.
• Consent: In cases such as direct marketing, where required by law, we seek your explicit consent. You may withdraw your consent at any time.

How We Use Your Information

Your data is used for the following core purposes:

• Processing, confirming, and delivering orders for flowers and related gifts.
• Communicating order updates and delivery notifications.
• Providing customer service and answering queries.
• Improving our website, services, and product offerings based on customer feedback and interactions.
• Sending marketing communications, when you have opted in to receive them.
• Meeting accounting and compliance obligations required by law.

Data Retention Policy

Florist Plumstead retains your personal data only for as long as necessary to fulfil the purposes it was collected for, including satisfying legal, accounting, or reporting requirements. In practice:

• Order Information: Retained for up to seven years for tax and accounting purposes, unless a longer retention period is required by law.
• Customer Correspondence: Retained for up to two years to help manage ongoing customer relationships or resolve disputes.
• Marketing Data: Retained until you unsubscribe or withdraw consent.

After these periods, data is securely deleted or anonymised.

Sharing Your Personal Data & Data Processors

Your personal data may be shared with third-party service providers working on our behalf, always under strict confidentiality and data protection agreements. Key processors may include:

• Payment Processors: To securely process your payments. We do not store your full payment card details.
• IT & Website Support Providers: To ensure the safe operation and maintenance of our websites and digital services.
• Delivery Partners: To deliver your order to its intended recipient.
• Accountants and Legal Advisors: Where necessary for compliance and legal advice.

We do not sell or rent your personal data to any third party. All processors are required to act solely under our instructions and in line with GDPR requirements. Where processors operate outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data.

Your Rights under GDPR

As a data subject, you have several rights regarding your personal data. You are entitled to:

• Access: Request access to personal data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete personal data.
• Erasure: Request the deletion of personal data where there is no lawful reason for us to retain it.
• Restriction: Request that processing be restricted in certain situations, such as if you contest the accuracy of your data.
• Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and transfer it to another controller where feasible.
• Objection: Object to the use of your data for direct marketing or where processing is based on legitimate interest.
• Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

To exercise your rights or make a data privacy request, please contact Florist Plumstead using the contact methods provided on our website or instore. We will respond to all requests as advised by the GDPR, generally within one month.

Security of Your Data

Florist Plumstead employs appropriate technical and organizational measures to safeguard your personal data against loss, theft, unauthorized access, modification, or disclosure. This includes secure access procedures, regular staff training, and robust digital security solutions such as encryption and firewalls.

Updates to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in legal requirements, our data processing, or business operations. When we make such changes, we will update the effective date at the top of the policy and post the revised policy on our website. Please review this page periodically to stay informed about how we are protecting your data.

Contact and Complaints

If you have any concerns or questions regarding your personal data, or if you wish to make a complaint, please contact Florist Plumstead through our standard shop or website contact channels. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data rights have been breached.

This Privacy Policy is effective for all customers placing orders with Florist Plumstead from Plumstead and surrounding districts.