Florist South Woodford GDPR Privacy Policy

Introduction

This Privacy Policy sets out how Florist South Woodford collects, processes, stores, and protects personal data for all customers placing orders from South Woodford and surrounding districts. We are committed to ensuring that your privacy and personal information are respected and handled according to the General Data Protection Regulation (GDPR) and all applicable privacy laws.

Scope

This policy applies to all activities involving the collection and processing of personal data from customers placing orders with Florist South Woodford, whether through our website, by telephone, or in person. It is intended for individuals living in South Woodford and the nearby areas who wish to place orders for our floral services.

What Personal Data We Collect

When you place an order or interact with us, we may collect and process the following categories of personal data:

  • Identity Data: Full name, title.
  • Contact Data: Delivery address, billing address, telephone number, and (if provided) email address.
  • Order Details: Information about your order, including products purchased, special instructions, delivery details, and the name and address of recipients.
  • Payment Data: Payment card information and transaction details (processed by our payment processors; we do not store card numbers).
  • Correspondence Data: Records of your communications with us, such as customer service inquiries, feedback, and complaints.
  • Technical Data: IP address, browser type and version, device information, time zone setting, and website usage data (if ordering online).

Lawful Basis for Processing

Under GDPR, every processing of personal data must have a lawful basis. Florist South Woodford relies on the following legal grounds:

  • Contractual Necessity: We process your personal data to fulfil our contract with you as a customer — for example, to deliver your floral order to the correct address and communicate updates about your purchase.
  • Legitimate Interests: We may process your data to improve our services, develop our business, and provide a satisfactory customer experience, provided these interests are not outweighed by your own data protection rights.
  • Legal Requirement: In some cases, we are obliged to retain or share data in compliance with legal obligations.
  • Consent: Where required, we will ask for your explicit permission to use your data (for instance, for marketing communications). You have the right to withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

  • Processing and delivering your orders.
  • Liaising with you regarding order status, delivery scheduling, or any issues.
  • Managing payments and refunds.
  • Improving our website, services, and customer experience.
  • Dealing with any inquiries, feedback, or complaints.
  • Fulfilling administrative functions and complying with legal obligations.

How We Share and Store Your Data

Your data is treated securely and confidentially. We may share your information only in the following circumstances:

  • With carefully selected service providers that deliver support services such as order management, deliveries, payment processing, and IT support. All such processors are contractually bound to handle your data securely and in compliance with GDPR.
  • With legal and regulatory authorities if required by law.
  • With our professional advisors (such as legal or accounting partners) strictly where necessary for business support and compliance.

We do not sell your personal data to any third parties.

Where Your Data is Processed

Your personal data is primarily processed within the United Kingdom and the European Economic Area (EEA). Should your data need to be transferred outside the EEA, we ensure appropriate safeguards are in place to maintain GDPR-level data protection.

Data Retention Policy

Florist South Woodford retains your personal data only for as long as necessary to fulfill the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. The retention periods are:

  • Order and transaction data: Kept for up to seven years to comply with tax and accounting obligations.
  • Customer correspondence: Retained for up to two years after resolution of the inquiry or complaint.
  • Marketing information: Retained until you withdraw consent or ask for deletion.

After expiry of these periods, your data will be securely deleted or anonymized.

Our Data Processors

We work with third-party suppliers to support our operations, such as:

  • Payment processors (for secure card payments)
  • Delivery or courier services
  • IT and cloud service providers

Each processor is vetted for GDPR compliance and contractually obliged to protect your information in line with our standards.

Your Data Protection Rights

Under GDPR, you have the following rights over your personal data:

  • The right to access – You can request a copy of the personal data we hold about you.
  • The right to rectification – You can ask us to correct any incomplete or inaccurate information.
  • The right to erasure – You can request that we delete your personal data, subject to legal retention obligations.
  • The right to restrict processing – You may ask us to limit how we use your information in certain circumstances.
  • The right to data portability – You can request to receive your data in a structured, commonly used format or for us to transfer it directly to another provider.
  • The right to object – You can object to the processing of your data based on legitimate interests or direct marketing.
  • Rights in relation to automated decision-making and profiling – You have the right not to be subjected to decisions based solely on automated processing.

To exercise any of these rights or for more information on how your data is used, you may contact us through the contact section of our website or by post at our business address in South Woodford.

Policy Updates

We may review and update this Privacy Policy from time to time to reflect changes in legal requirements, best practices, or our services. The latest version will always be available on our website. If material changes are made, we may take appropriate steps to inform you.

Contact Information

If you wish to make a data protection request, including exercising your rights under GDPR, or if you have any concerns about your privacy, please contact us using our official communication channels listed on our website or write to us at our trading address in South Woodford.

Further Information

If you are dissatisfied with our response to your privacy request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.