How Wandsworth Florist Handles Your Personal Data Legally and Securely

Wandsworth Florist Privacy Policy for Customers

Introduction

This Privacy Policy explains how Wandsworth Florist collects, uses, and safeguards personal information belonging to our customers. It applies to all individuals who place orders with Wandsworth Florist in Wandsworth and its surrounding districts. We are committed to protecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR). Please read this policy carefully to understand your rights and how your data is processed.

What Data We Collect

When you place an order or communicate with Wandsworth Florist, we may collect the following types of personal data:

Contact Information: Name, address, telephone number, and delivery address details.
Order Details: Products ordered, delivery instructions, and order preferences.
Payment Information: Card transaction details (processed securely through third-party payment processors), billing address, and payment confirmation.
Communication Data: Emails, online enquiries, or messages related to your order or customer service interactions.
Device and Usage Data: IP address, browser type, and log data when you visit our website (collected via cookies and analytics tools).

We do not intentionally collect special category data (such as health or religious information) unless it is provided to us as part of a special request. If this occurs, the data is handled with additional care and strictly as required to complete your order.

Lawful Basis for Processing

Our legal bases for processing your personal data comply with Article 6 of the GDPR and are as follows:

Contractual Necessity: To process and deliver your order, respond to your enquiries, and fulfill our contract with you.
Legal Obligations: To meet requirements under the law, such as retaining transaction records for tax and accounting purposes.
Legitimate Interests: To manage our business operations, improve customer service, respond to feedback, and protect our services from fraud or misuse. We always balance these interests against your rights and freedoms.
Consent: Where required, such as for direct marketing communications, we will seek your specific consent, which can be withdrawn at any time.

Why and How We Use Your Data

Wandsworth Florist uses your personal information for the following purposes:

Processing and delivering orders, including confirming your details and arranging delivery logistics.
Communicating with you about your order, responding to queries, and providing customer support.
Processing payments and preventing fraudulent transactions.
Improving our website, products, and services through analytics and customer feedback.
Fulfilling legal and regulatory obligations.

Your data is not subject to automated decision-making or profiling beyond what is necessary to process your order efficiently.

How Long We Keep Your Information (Data Retention)

We retain your personal information only as long as necessary for the purposes it was collected and in accordance with legal requirements. In general:

Order details and associated personal data are retained for up to seven years to comply with tax and accounting regulations.
Customer service correspondence will be kept for up to two years from the date of the last interaction.
Payment data is not stored by Wandsworth Florist but processed securely by third-party payment providers.
Website usage data is retained according to our analytics provider’s standard policies, generally no more than two years.

After these periods, personal information is securely deleted or anonymised so it can no longer be associated with you.

Data Processors and Sharing

Wandsworth Florist may share your data with trusted third-party service providers (data processors) who assist us in executing the services you request, including:

Payment processing companies to handle transactions securely.
Delivery service providers for fulfilling and delivering your orders.
Website hosting and maintenance providers to support our online services and security.
Professional advisors such as accountants or legal counsel, when required to comply with law.

All processors are contractually obligated to keep your data confidential, process it only on our instructions, and safeguard it under GDPR standards. We do not sell or rent your personal data to third parties for marketing purposes.

International Transfers

Wherever possible, your data is stored and processed within the United Kingdom and the European Economic Area (EEA). If it becomes necessary to transfer your data outside these areas, we will ensure appropriate safeguards are in place in line with GDPR requirements, such as data processing agreements or reliance on adequacy decisions.

Your Rights Under GDPR

Under data protection legislation, you have the following rights regarding your personal data:

Right to Access: Request a copy of your personal data held by us.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data in certain circumstances.
Right to Restriction: Request restriction of processing where you contest the accuracy or lawfulness of data processing.
Right to Data Portability: Request transfer of your data to you or another service provider in a structured, commonly used format.
Right to Object: Object to processing where our lawful basis is legitimate interest or direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the contact details available on our website. We are committed to responding to your requests promptly and will address queries or complaints in accordance with GDPR requirements.

Security of Your Personal Information

Wandsworth Florist implements appropriate technical and organisational measures to safeguard your data from loss, misuse, unauthorised access, theft, and alteration. Access to personal data is limited to staff and processors who require it to fulfil their job functions and is protected by secure passwords and encrypted communications where appropriate.

Policy Updates

We may update this Privacy Policy occasionally to reflect changes to our practices or for legal and regulatory reasons. The latest version will always be available on our website. We recommend reviewing this policy periodically to stay informed about how your personal data is protected.

Contact and Complaints

If you have any questions about this Privacy Policy or how Wandsworth Florist handles your data, please refer to our website for information on how to get in touch. You are also entitled to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have not been upheld.