Privacy Policy for Florist Watford Customers

Introduction

This Privacy Policy applies to all customers placing orders with Florist Watford located in Watford and the surrounding districts. Florist Watford is committed to safeguarding the privacy and personal data of its customers, in compliance with the UK General Data Protection Regulation (GDPR). This policy outlines what personal data we collect, our lawful bases for processing, retention periods, data processors used, and your rights as a data subject.

Scope of This Policy

This policy covers all personal data collected from customers ordering flowers or related products from Florist Watford in Watford and its surrounding areas. By placing an order, you acknowledge and agree to the terms of this policy.

What Data We Collect

Florist Watford may collect the following categories of data:

• Contact Information: Including your name, delivery address, billing address, telephone number, and any other relevant contact details provided during the ordering process.
• Order Details: Information about the products you purchase, delivery instructions, card messages, and associated information required to fulfill your order.
• Payment Information: Details of your payment method. Note: While we process payments securely, we do not store full credit/debit card numbers or security codes.
• Communication Data: Records of correspondence via web forms or other means related to your order, enquiries, or customer feedback.
• Technical Data: When you use our website, we may collect technical data such as IP address, browser type, and device information for the purposes of security and improving our services (where applicable).

We do not intentionally collect data from children or sensitive personal data (such as health, ethnicity, or religious beliefs) as part of the order process.

Lawful Basis for Processing

Under the GDPR, Florist Watford must have a lawful basis to process your personal data. We rely on the following bases:

• Contractual Necessity: Processing your personal data is necessary for the performance of our contract with you, such as fulfilling and delivering your orders, and providing customer service.
• Legal Obligation: Where necessary, we process certain personal data to comply with legal and regulatory requirements, such as tax and accounting obligations.
• Legitimate Interests: We may process data as needed for our legitimate business interests, such as improving our services, handling disputes, or protecting against fraud, provided these interests do not override your rights and freedoms.
• Consent: We may rely on your consent to send you marketing communications, where required and appropriate. You have the right to withdraw your consent to marketing at any time.

Use of Your Data

Your personal data is used exclusively for the following purposes:

• Processing, fulfilling, and delivering your orders.
• Handling payments and refunds.
• Communicating with you regarding your order or customer service matters.
• Fulfilling accounting, legal, or regulatory requirements.
• Improvements to our services and business operations.
• Providing relevant marketing communications if you have opted in.

Data Retention

Florist Watford only retains personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, regulatory, or accounting requirements. Typically, order and customer data are retained for up to seven years to comply with financial and legal obligations. Once data is no longer required, it is securely deleted or anonymized.

Third-Party Processors

We may share your personal data with trusted third-party processors solely for the purpose of delivering our services to you. These may include:

• Payment processors: Secure payment platforms that process your transactions.
• Delivery/courier services: Companies or individuals responsible for delivering your order to the specified address.
• IT and website support providers: Service providers who assist in maintaining and supporting our website and internal systems.

All third-party processors are required to adhere to data protection standards that are consistent with GDPR requirements and to process your data only as instructed by Florist Watford.

Your GDPR Rights

As a data subject under the GDPR, you have the following rights:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct or update inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data, provided it is no longer necessary for the purposes for which it was collected and there is no overriding legal obligation to retain it.
• Right to Restriction: You may request the restriction of processing under certain conditions.
• Right to Data Portability: You may request to receive your data in a structured, commonly used format and to transmit that data to another controller where technically feasible.
• Right to Object: You may object to processing based on our legitimate interests or to receiving direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw this consent at any time.

To exercise any of these rights, please contact us using the details found on our contact or help page. We will aim to respond to your request within one calendar month, in accordance with GDPR requirements.

Data Security

Florist Watford implements appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse. This includes secure website protocols and restricted access to customer information.

Changes to This Policy

We reserve the right to update or amend this Privacy Policy as needed to comply with legal developments or to improve our data protection practices. The latest version will always be available with your order documentation or on request. We encourage you to review this policy periodically to remain informed of how your data is handled.

Contacting Us

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please refer to the contact details on our website or order confirmation documents. We are committed to addressing your concerns promptly and ensuring your privacy rights are respected.