Privacy Policy for Florist Dulwich Customers

Name: SWEET LOVE
Brand: Florist Dulwich
Price: 109.00 GBP
Availability: InStock

Introduction

This Privacy Policy details how Florist Dulwich ("we", "us", "our") collects, uses, and protects your personal data when you place an order with us. This policy applies to all customers making orders for flower arrangements and related services from Florist Dulwich within Dulwich and surrounding districts. Our commitment is to ensure any data you provide is handled securely and in accordance with the General Data Protection Regulation (GDPR).

What Data We Collect

We collect a range of data necessary to fulfill and process your floral orders. The personal data we may collect includes:

Contact Details: Name, delivery address, billing address, phone number (if given), and other relevant contact details.
Order Information: Details of flower selections, message card texts, delivery instructions, occasion information, and payment details. Note that payment card processing is handled securely by third-party providers and we do not retain your full card information.
Communications: Any correspondence you have with us regarding orders, queries, or feedback.
Technical Data: Limited data such as IP address and browser information, collected when you use our website for order placement. This may be gathered through cookies and similar technologies, primarily to ensure secure and efficient service.

Lawful Basis for Processing

Under GDPR, we must have a legitimate basis for every instance of personal data processing. For Florist Dulwich, this includes:

Contractual Necessity: Most processing, such as handling your order and communicating about delivery, is based on fulfilment of a contract.
Legal Obligations: Compliance with regulatory requirements, such as record-keeping for tax and accounting purposes.
Legitimate Interests: For quality control, service improvement, and, where appropriate, communicating with you about our services. We ensure our legitimate interests do not infringe on your data rights.
Consent: In cases where you have opted in to marketing communications, your data is processed based on your consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal data is used strictly for the purpose it was collected. Uses include:

Processing and delivering your order efficiently and accurately.
Managing payment and invoicing requirements.
Communicating with you for confirmation, queries, or updates related to your order.
Improving our services and customer experience.
Where you have given consent, sending updates or marketing related to Florist Dulwich.

Data Retention

We retain personal data for only as long as necessary to fulfil the purpose for which it was collected, including satisfying any legal, accounting, or reporting requirements. Standard retention periods are:

Order and Contact Data: Typically retained for up to 6 years due to tax and business record regulations.
Communications: Retained for as long as required to resolve your enquiry or as long as required by law.
Marketing Preferences: Maintained until you withdraw your consent or request deletion.

When your data is no longer needed, we will securely delete or anonymize it.

Processors and Data Sharing

We never sell your personal data. Your information may be shared with trusted external providers (processors) to enable us to fulfil your orders and operate the business, such as:

Payment processing platforms (to handle card or electronic payments securely).
Delivery partners or couriers (to organize and fulfil deliveries).
IT and website support services (for website hosting, order management, and email communications).

All third-party processors are contractually obliged to comply with GDPR and to use your data only in accordance with our instructions. We do not transfer your personal data outside the UK or European Economic Area unless adequate protection arrangements are in place.

User Rights

Under GDPR, you have rights regarding your personal data:

Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Ask us to correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data where applicable.
Right to Restriction: Request restriction of processing in certain circumstances.
Right to Data Portability: Request transfer of your personal data to another service provider.
Right to Object: Object to how we process your data based on legitimate interest or for marketing purposes.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time.

If you wish to exercise any of these rights, please contact us using the "Contact" details provided on our website. Please note that we may ask for proof of identity to ensure we respond to the correct individual and comply with data protection regulations.

Data Security

We implement technical and organizational measures to safeguard your data against unauthorised access, alteration, loss, or destruction. These include secure hosting, controlled access, encrypted communications where feasible, and staff training on data protection obligations.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our services. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions about this Privacy Policy or how your data is handled by Florist Dulwich, please refer to the contact details provided on our website. We are happy to address your enquiries or concerns regarding personal data and privacy.