Privacy Policy for Florist Becontree Heath Customers

Introduction

This Privacy Policy explains how Florist Becontree Heath ("we", "us", "our") collects, uses, and protects your personal data when you place an order with us, whether from Becontree Heath or the surrounding districts. We are committed to safeguarding your privacy and ensuring your personal information is processed lawfully, transparently, and securely in accordance with the General Data Protection Regulation (GDPR).

Scope of this Privacy Policy

This policy applies to all customers who place orders with Florist Becontree Heath, either online, by phone, or in-person, for deliveries to Becontree Heath and neighbouring areas. By placing an order with us, you acknowledge and agree to the terms outlined in this policy.

What Data We Collect

When you place an order or interact with Florist Becontree Heath, we may collect the following types of personal data:

• Personal Identifiers: Name, delivery address, billing address, and contact details (such as phone number and postal address).
• Order Information: Details about your order, including delivery preferences, messages for the recipient, and occasion (e.g., birthday, anniversary).
• Payment Information: Transaction details (note: payment card data is securely processed by authorised processors; we do not store full payment card details ourselves).
• Communication Records: Details of correspondence between you and Florist Becontree Heath, including customer service enquiries and feedback.
• Technical Data: When engaging with our website, we may collect IP address, device type, browser type, and information about your browsing activity via cookies or analytics tools (refer to our cookie policy for further detail).

Lawful Basis for Processing Personal Data

Under the GDPR, we are required to have a lawful basis for processing your personal data. Depending on the circumstances, we process your personal data on one or more of the following bases:

• Performance of a Contract: Most of the data we collect is necessary to fulfil your order (e.g., processing and delivering your flowers; contacting you regarding your order).
• Legal Obligations: We may be required to retain certain transaction or tax-related information to comply with local laws and regulations.
• Legitimate Interests: For activities such as internal record keeping, improving our services, or communicating important service updates, provided these do not override your rights and interests.
• Consent: In some cases, such as direct marketing communications, we may request your explicit consent. You can withdraw your consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and delivering your orders;
• Providing customer service and support;
• Sending service notices or important information about your order;
• Personalising your experience with us;
• Maintaining internal records as required by law;
• Improving our products and services.

Data Processors and Sharing Your Information

In the course of providing our services, we may share your personal data with the following categories of third parties ("processors"):

• Payment Service Providers: To securely process your payments.
• Delivery Partners: To ensure successful and timely delivery of your order.
• IT and System Administrators: To support our website, order management, and communication systems.

All third party processors are contractually bound to process your data only as instructed by us, in compliance with GDPR and this Privacy Policy. We will not sell, lease, or otherwise share your personal information with parties unrelated to the fulfilment of your order or as required by law.

Data Retention

Florist Becontree Heath retains your personal information for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, accounting, or reporting requirements. Typically:

• Order-related data is retained for up to six years to comply with legal and accounting recordkeeping obligations.
• Customer enquiry data is retained for up to two years after the resolution of your enquiry.
• Data processed on the basis of consent (e.g., marketing preferences) will be retained until you withdraw your consent or unsubscribe.

Your Rights Under GDPR

You have the following rights regarding your personal data, subject to applicable law and certain exemptions:

• Right to Access: Request details of the personal data we hold about you.
• Right to Rectification: Request the correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data when there is no legal ground for its continued processing.
• Right to Restriction: Request restriction of processing where you contest the accuracy or lawfulness of our use of your data.
• Right to Portability: Request a copy of your personal data in a structured, commonly-used, and machine-readable format to transfer to another service provider.
• Right to Object: Object to the processing of your data, including for direct marketing purposes.
• Right to Withdraw Consent: Where we process data based on your consent, you may withdraw your consent at any time.

To exercise any of your rights, you may contact us using the details provided at the end of this policy or on our official website. We may need to verify your identity before acting on your request, in order to protect your privacy and security.

Data Security

We implement a variety of technical and organisational measures to safeguard your personal data from unauthorised access, disclosure, alteration, or destruction. These measures are regularly reviewed and adapted in line with technological developments and best practice, and our staff receive appropriate data protection training.

Changes to This Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in the law or our business practices. The latest version will always be available on our website and is effective from the date displayed at the top of the policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contacting Us

If you have any questions about this Privacy Policy, how we use your personal data, or if you wish to make a request or complaint, please reach out to us via our shop or official website. We take your privacy seriously and will respond to your request as promptly as possible.