Plaistow Florist GDPR Privacy Policy

Our Commitment to Your Privacy

Plaistow Florist is dedicated to respecting and safeguarding your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your data when you place orders with us, whether you are located in Plaistow or surrounding districts. We are committed to processing your data fairly, transparently, and securely.

Scope of This Policy

This policy applies to all individuals who place orders with Plaistow Florist, whether directly at our store, over the telephone, or via our website, serving Plaistow and the adjacent areas. By placing an order, you agree to the collection and use of information in accordance with this policy.

Types of Data We Collect

When you interact with Plaistow Florist, the following types of personal data may be collected, depending on your method of contact and transaction:

• Identity Data: Your name (as customer and/or recipient of flowers)
• Contact Data: Delivery address, billing address, phone number
• Order Data: Product and service details, delivery instructions, occasion type (e.g., birthday, anniversary)
• Payment Data: Payment method, transaction amount, partial card details (last four digits if collected), but not full card numbers or security codes
• Communication Data: Messages, notes, or preferences you provide relating to your order
• Technical Data: Limited information such as IP address and browser type if you use our website

Lawful Basis for Processing Data

Plaistow Florist processes personal data on the following lawful bases:

• Contractual necessity: To fulfill your requests and provide our floral products and related services
• Legal obligation: To comply with applicable UK laws and regulations, including tax and accounting obligations
• Legitimate interests: To improve our services, prevent fraud, and ensure quality customer service (only where these interests are not overridden by your rights and interests)
• Consent: Where required, for specific marketing or non-essential communications, after obtaining your explicit consent. You may withdraw consent at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

• Processing and fulfilling your floral order
• Delivering products to the correct recipient
• Processing payments and refunds
• Sending order confirmations and updates
• Responding to your queries and customer service requests
• Complying with legal and regulatory requirements
• Improving our products and services
• Sending marketing communications, only where you have opted in

Data Retention Policy

Your personal data is retained only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and reporting requirements. Generally, we keep transaction data for up to seven years, in line with tax regulations. Communications and non-transactional data are typically kept for no longer than two years. After these periods, your personal data is securely deleted or anonymised.

Data Processors and Third Parties

We may share your personal data, where necessary, with the following types of processors and partners who are contractually obligated to process your information only as instructed and with appropriate safeguards:

• Payment service providers for secure processing of card payments
• Delivery and courier services for completing orders
• Accountants and regulatory auditors for compliance purposes
• Technical and website service providers for hosting, maintenance, and support functions

We do not sell your personal data to any third parties. All data processors are contractually bound to comply with the requirements of the UK GDPR and take appropriate technical and organisational measures to ensure your data remains secure.

Your Rights Under GDPR

As a data subject under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data, subject to certain exceptions (for example, where retention is required by law)
• Right to restrict processing: Ask us to limit the processing of your data in certain circumstances
• Right to data portability: Receive your data in a commonly used and machine-readable format
• Right to object: Object to our processing of your data based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw previously given consent at any time
• Right to lodge a complaint: Contact the UK Information Commissioner’s Office (ICO) if you are dissatisfied with how we manage your data

To exercise any of these rights, please contact us via the channels identified in our store or on our official correspondence.

Security Measures

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse or disclosure. This includes secure payment processing, restricted access protocols, and regular staff training on data protection. While we strive to ensure data security, no method of transmission or storage is entirely foolproof, but we follow industry best practices to reduce any risks.

Children’s Privacy

Plaistow Florist does not knowingly collect personal data from children under the age of 16. If we learn that personal data of a child has inadvertently been collected, we will delete such information promptly.

Policy Changes

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. The date of the latest version will always be indicated at the end of this policy. We recommend reviewing this policy periodically.

Contact and Further Information

For further information about our privacy practices or questions about your personal data, please contact us using the details advertised at our store or on our official business documentation. We are happy to assist you with any concerns regarding your privacy.

Last updated: June 2024