Florist Mitcham Privacy Policy

Introduction

This Privacy Policy describes how Florist Mitcham collects, uses, stores, and protects the personal data of customers placing orders in Mitcham and the surrounding districts. We are committed to ensuring your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable data protection laws in the United Kingdom.

Scope of Policy

This policy applies to all individuals who place orders with Florist Mitcham for delivery or collection within Mitcham and neighbouring districts. By using our services, you consent to the practices outlined in this Policy.

What Personal Data We Collect

When you interact with Florist Mitcham, we may collect the following types of personal data:

  • Contact Information: Such as your name, delivery address, and telephone number for order fulfillment.
  • Order Details: Information about your purchases, including recipient’s name, address, and message card contents.
  • Payment Information: Limited information required for processing payments. We do not store full credit/debit card details, as payments are processed securely via third-party providers.
  • Communication Data: Records of correspondence, feedback, or queries you send us.
  • Website Usage Data: Information collected through cookies or analytics tools (such as IP addresses, device information, and browsing activity) to improve your customer experience and our website functionality.

Lawful Basis for Processing Data

Florist Mitcham processes your personal data only if there is a lawful basis, as required under GDPR. The primary lawful bases are:

  • Performance of a Contract: Data is processed to fulfil your order or provide you with requested products and services.
  • Legal Obligation: We may process data if required to comply with legal or regulatory obligations.
  • Consent: Where required, we will obtain your explicit consent before processing data, such as for optional marketing communications.
  • Legitimate Interests: We may process your data to improve our services, enhance security, or handle customer queries, where these interests do not override your rights.

How We Use Your Personal Data

Your personal data is used for the following purposes:

  • Processing and delivering your flower orders
  • Communicating with you regarding orders, delivery, or issues
  • Responding to your enquiries or feedback
  • Fulfilling legal and regulatory requirements
  • Improving our website, products, and customer service
  • Sending marketing communications (only with your explicit consent)

How Long We Keep Your Data (Retention)

Florist Mitcham retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. In summary:

  • Order and Contact Data: Retained for up to six years for tax and accounting purposes, or as long as there is a contractual need.
  • Marketing Data: Retained until you withdraw your consent or unsubscribe from communications.
  • Enquiry and Feedback Data: Typically held for two years, unless longer retention is necessary for legal reasons.
  • All data is securely deleted or anonymised when it is no longer required for its original purpose.

Your Data and Our Processors

In order to provide the best customer experience, Florist Mitcham may use trusted third-party service providers (“processors”) for certain processing activities. The categories of processors we use include:

  • Payment Gateways: To securely process payments for orders.
  • IT Service Providers: For website hosting, maintenance, security, and analytics tools.
  • Delivery Partners: For fulfilling flower deliveries to recipients in Mitcham and nearby districts.

All processors are contractually required to protect your data and may only process it under our instructions. They are not permitted to use your data for their own purposes.

How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, accidental loss, destruction, or disclosure. Measures include regular system security assessments, staff training, secure password policies, and limiting access to data only to those who require it for their job role.

Your Data Protection Rights

Under the GDPR, you have the following rights:

  • Right to Access: You can request access to your personal data held by Florist Mitcham.
  • Right to Rectification: You can request correction of inaccurate or incomplete data.
  • Right to Erasure: You can request the deletion of personal data no longer necessary for its original purposes, subject to legal retention requirements.
  • Right to Restrict Processing: You may request that we limit how we use your data under certain circumstances.
  • Right to Data Portability: You can obtain and reuse your personal data for your own purposes.
  • Right to Object: You may object to processing where our basis is legitimate interest or direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us through the contact methods provided on our website or in-store. We may require proof of identity to verify your request and will respond within one month, in line with GDPR guidelines.

Children’s Privacy

Florist Mitcham does not knowingly process personal data of individuals under the age of 16 without verified parental consent, as required by law. If we become aware of such processing, we will take steps to delete the data promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, technical, or business changes. Updates will be posted on this page with a revised effective date. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact and Further Information

If you have questions about this Policy, your rights, or our data processing activities, please use the contact details published on our website or visit us in-store. We are committed to addressing your requests and upholding your privacy rights.