Florist Dalston Privacy Policy

Introduction

This Privacy Policy explains how Florist Dalston collects, uses, and protects your personal data when you place orders with us, either online or in person, from Dalston and the surrounding districts. We are committed to safeguarding your privacy and handling your personal information in compliance with the European Union General Data Protection Regulation (GDPR).

Scope of Policy

This Privacy Policy applies to all customers of Florist Dalston who place orders for flowers and related services within Dalston and neighbouring areas. By placing an order, you acknowledge and agree to the collection and usage of your personal data as described herein.

What Data We Collect

We only collect the personal information necessary to fulfil your floral orders and provide customer service. The types of data we may collect include:

• Identity Data: Name
• Contact Data: Delivery address, billing address, and postcode
• Communication Data: Details you provide when contacting us, instructions for orders or delivery notes
• Order Data: Products ordered, purchase history
• Payment Data: (Processed by our payment processors; we do not store full card details)
• Technical Data: IP address, browser type, and information about how you use our website (if ordering online)

Lawful Basis for Processing

Under GDPR, we process your personal data on these legal bases:

• Contractual Necessity: To process, confirm, and deliver your order and to communicate with you about your purchase. This is required to fulfil our contract with you.
• Legitimate Interests: To improve our products and services, ensure the security of our systems, and maintain necessary business operations, provided your privacy rights are not overridden.
• Legal Obligation: To comply with UK tax and accounting regulations that may require us to retain transaction records.
• Consent: If you opt-in to receive marketing communications, we will only send these with your clear consent, which can be withdrawn at any time.

How We Use Your Information

Your data is used to:

• Process and deliver your floral orders
• Respond to your queries and provide customer support
• Improve our services and customer experience
• Comply with legal and accounting requirements
• Send you marketing updates if you have consented

Data Retention

We retain your personal data only as long as is necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting obligations. In general:

• Order data and associated contact details are stored for up to seven years to comply with tax regulations.
• Enquiry or communication data is retained for up to two years after your last interaction with us.
• If you have opted in for marketing, your consent and contact details remain until you withdraw consent or unsubscribe.

After these periods, personal data is securely deleted or anonymised.

Processors and Sharing of Information

We do not sell or rent your personal data to third parties. However, to fulfil your orders and operate our business, we may share necessary data with the following categories of data processors:

• Payment Processors: Our approved payment solutions securely handle your payment details while preventing fraud. We do not store your card information ourselves.
• Delivery Partners: Addresses and recipient names are shared only as needed for deliveries within Dalston and the surrounding districts.
• IT Service Providers: We use third parties to host our website, manage online orders, and maintain security and functionality.
• Accountants and Legal Advisers: Where necessary for tax and legal compliance.

Each third-party processor only accesses the personal data necessary for their function and is contractually obliged to comply with GDPR standards.

Your data is stored within the UK or European Economic Area (EEA). If data needs to be transferred outside the EEA, we ensure adequate safeguards are in place, as required by law.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of Access: You may request information about the personal data we hold on you and how it is processed.
• Right to Rectification: You can ask us to correct inaccuracies in your information.
• Right to Erasure: In certain circumstances, you can request that we delete your data.
• Right to Restrict Processing: You have the right to limit how we use your data under specific conditions.
• Right to Data Portability: You may request your data in a structured, commonly used format to transfer elsewhere.
• Right to Object: You can object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details on our website or in your order confirmation. We welcome questions or concerns regarding your privacy, and we will respond in accordance with GDPR timelines.

Security Measures

We have implemented appropriate organisational and technical measures to protect your personal data from loss, misuse, and unauthorised access. These include encryption, secure servers, and strict access controls. The confidentiality and safety of your data are our priority.

Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements. Any significant changes will be communicated on our website, and prior versions will be archived for your reference. Continued use of our services after updates confirms your acceptance of these changes.

Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us using the details provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been violated. We recommend contacting us first so we can address your concerns directly.