Blackfriars Florist Data Protection and Privacy Policy

Introduction

At Blackfriars Florist, we value your privacy and are committed to safeguarding your personal data. This Privacy Policy outlines how we collect, use, store, and protect information relating to customers who place orders with Blackfriars Florist, whether residing in or ordering for delivery to Blackfriars and the surrounding districts.

Who This Policy Applies To

This policy is intended for all individuals who place orders with Blackfriars Florist, including residents of Blackfriars and those in neighbouring areas, as well as individuals placing orders for recipients within these districts. By using our services, you agree to the practices described in this document.

What Personal Data We Collect

We only collect personal data that is necessary to fulfill your floral orders and to provide associated customer service. The categories of data we may collect include:

  • Contact Information: Such as your full name, delivery address, billing address, and phone number (if provided).
  • Order Details: Including order contents, special delivery instructions, messages for recipients, and any preferences specified.
  • Payment Information: We process payment (e.g., card details) securely with trusted third-party payment processors; we do not store full card numbers.
  • Recipient Information: Name, delivery address, and contact number of the recipient to ensure successful delivery.
  • Communication Records: Copies of correspondence or communications, such as feedback or queries regarding orders.
  • Technical Data: Limited information collected via our website, such as IP addresses and cookie data, to facilitate order processing and site security.

Lawful Basis for Data Processing

In accordance with the General Data Protection Regulation (GDPR), we only process your personal data when there is a lawful basis to do so. These lawful bases include:

  • Contractual Obligation: Most data is processed to fulfil our contract with you, which is to supply products and services that you order.
  • Legitimate Interests: We may process certain data for legitimate business interests, such as maintaining our records, improving our services, and ensuring secure transactions, provided that such interests are not overridden by your rights.
  • Legal Compliance: Certain data must be retained and processed to meet our legal obligations, such as tax and accounting requirements.
  • Consent: In some cases (e.g., direct marketing), we may seek your explicit consent, which can be withdrawn at any time.

How We Use Your Personal Data

Your personal data is used only for the following purposes:

  • Processing and fulfilling your floral orders, including communication regarding order status;
  • Processing payments securely with third-party payment processors;
  • Delivering products to specified addresses within Blackfriars and surrounding districts;
  • Maintaining accurate records for tax and regulatory compliance;
  • Responding to your queries, feedback, or complaints;
  • Improving our products and customer service based on aggregated or anonymised data;
  • Sending updates or direct marketing, but only where legally permitted or where you have consented.

Data Retention

We retain your personal data for no longer than necessary. Generally, order and contact details are stored for up to seven years to comply with legal and accounting obligations. Recipient details and communication records are retained only as long as necessary to fulfill the delivery and resolve related queries or disputes. When your data is no longer necessary, we take all reasonable steps to securely delete or anonymise it.

Processors and Data Sharing

Blackfriars Florist does not sell your personal data to third parties. However, we may share your data with trusted external processors who help to deliver our services. These include:

  • Payment Service Providers: For secure payment processing;
  • IT and Web Hosting Providers: For safe storage of electronic data and website operations;
  • Delivery Agents: Trusted couriers or delivery drivers who receive only the information necessary to complete the delivery;
  • Professional Advisers: Accountants or legal advisors, where required by law.

All processors are contractually obligated to process your data in line with GDPR requirements and only for specified purposes. Data is not transferred outside the UK or European Economic Area (EEA) unless appropriate safeguards are in place.

Your Rights Under GDPR

As a customer, you have the following data protection rights:

  • Right to Access: You may request a copy of the personal data we hold about you and details of how we process it.
  • Right to Rectification: You can request correction of inaccurate or incomplete data.
  • Right to Erasure: Where applicable, you may request that your data be deleted when it is no longer required for processing, subject to our legal obligations.
  • Right to Restrict Processing: In certain circumstances, you can ask us to limit the way we use your data.
  • Right to Data Portability: You may ask for your data to be handed over to you or another provider in a commonly used, machine-readable format.
  • Right to Object: You have the right to object to processing for purposes such as direct marketing at any time.
  • Right to Withdraw Consent: Where we process data on the basis of your consent, you can withdraw this consent at any time.
  • Right to Lodge a Complaint: If you believe your rights have been violated, you may lodge a complaint with the relevant data protection authority.

Keeping Your Data Secure

Blackfriars Florist takes security seriously. We have implemented appropriate physical, technical, and organisational measures to protect your data against unauthorised access, loss, or misuse. Our staff and any third-party processors are obliged to respect the confidentiality and security of your personal data at all times.

Policy Updates

This Privacy Policy may be reviewed and updated periodically to reflect changes in legal requirements or our business processes. Any significant changes will be communicated to existing customers where necessary.

Contact and Further Information

If you have questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us at Blackfriars Florist. We are committed to addressing any concerns and ensuring the protection of your personal data.