Purley Florist Privacy Policy

Introduction

This Privacy Policy describes how Purley Florist (“we”, “us”, or “our”) collects, uses, retains, and protects your personal data when you place an order through our services. This policy applies to all customers placing Purley Florist orders from Purley and surrounding districts. We are committed to handling your information securely and in accordance with the UK General Data Protection Regulation (GDPR).

What Personal Data We Collect

When you interact with Purley Florist, we may collect and process the following types of personal data:

• Identity Data: Name, title, and contact details (such as address and phone number).
• Order Data: Details of the orders you place, including recipient name, delivery address, message, and order notes.
• Payment Data: Payment confirmation and transaction information from your chosen payment provider (note: we do not store credit or debit card numbers).
• Correspondence Data: Records of communication such as queries, feedback, complaints, or compliments you send us.
• Technical Data: Device type, IP address, browser data, and usage data about your interactions with our website for security and improvement purposes.

How We Use Your Data and Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The primary lawful bases we rely on under the GDPR are as follows:

• Performance of a Contract: Most of the information we process is necessary to fulfil your order, deliver flowers, process transactions, and provide customer support.
• Legal Obligation: In some cases, we are required by law to retain certain information for accounting or tax purposes.
• Legitimate Interests: We may process your information for our legitimate business interests such as improving our services, managing our website, or protecting our business, so long as these do not override your data protection rights.
• Consent: We will request your consent before sending you marketing communications or promotional offers. You can withdraw your consent at any time.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typically, we will retain order and associated customer data for a period of seven years, in line with legal obligations for business records. Where your data is not required for legal reasons, it will be securely deleted or anonymised at the earliest date.

Data Processors and Third Parties

We may engage trusted third-party service providers (“processors”) to help us deliver our services. Such processors only handle your data in accordance with our instructions and the GDPR. Our processors may include:

• Payment Providers: To process your payments securely (we never store card details).
• IT Service Providers: To host, store, and maintain the security of our website and associated data.
• Delivery Partners: To deliver your orders efficiently and reliably.

All third parties engaged by Purley Florist are required to respect the security of your personal data and to treat it in accordance with the law. We do not sell or rent your information to any external parties.

Your Rights Under GDPR

You have several important rights under data protection law. These include the right to:

• Access the personal data we hold about you.
• Rectify incomplete or inaccurate information.
• Erase your data, also known as the 'right to be forgotten', where there is no lawful reason for us to continue processing it.
• Restrict or object to the processing of your data in certain circumstances.
• Port your data in a structured, commonly used, and machine-readable format to another provider (right to data portability).
• Withdraw consent at any time (where we rely on your consent for processing).
• Lodge a complaint with the Information Commissioner's Office if you believe your data has been handled unlawfully.

If you wish to exercise any of these rights or require clarification on how your data is handled, please contact us using the details provided on our website.

Security of Your Data

We are committed to ensuring the security of your personal data. We have implemented a range of organisational and technical measures to safeguard all personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure networks, role-based access, and regular reviews of our security practices with third-party providers.

International Transfers of Data

Your information is stored and processed within the United Kingdom or within the European Economic Area (EEA). In exceptional cases where we may need to transfer data outside the EEA, we ensure that appropriate safeguards (such as adequacy decisions or standard contractual clauses) are in place to protect your rights and privacy.

Children’s Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal data relating to children. If we become aware that we have inadvertently processed the data of a child under 16, we will take reasonable steps to delete that data as soon as possible.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. Any changes will be posted on our website, and the effective date will be noted at the top of the policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact and Further Information

If you have any questions about this Privacy Policy or your personal data, or if you would like to exercise any of your rights, please refer to the contact details provided on our website. Our team will acknowledge your enquiry and respond without undue delay.

This Privacy Policy applies to all personal data collected from customers placing orders with Purley Florist in Purley and the surrounding districts, ensuring that your data is handled responsibly and lawfully.