Florist Old Ford GDPR Privacy Policy

Introduction

This Privacy Policy explains how Florist Old Ford collects, uses, stores, and protects your personal data when you place an order or make enquiries. It also outlines your data protection rights in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Old Ford from Old Ford and the surrounding districts. We are committed to ensuring your privacy is respected and that your personal data is processed fairly, lawfully, and transparently.

What Data We Collect

When you interact with Florist Old Ford, whether by placing an order, making an enquiry, or visiting our premises, we may collect and process the following categories of personal data:

  • Identity Data: Your first and last name.
  • Contact Data: Delivery address, billing address, telephone number, and any other contact details you provide.
  • Order Details: Information regarding your purchase, such as product selection, messages for the recipient (if applicable), delivery instructions, and payment confirmation status.
  • Payment Information: While we may receive confirmation that a payment has been made, we do not directly store or process your card or bank details. These are handled by trusted payment service providers.
  • Correspondence: Records of any communications you send to us, including feedback, queries, or complaints.
  • Technical Data: If you visit our website, we may collect information such as IP addresses, browser types, device information, and website usage analytics, as anonymised or aggregated data.

Lawful Basis for Processing Your Data

Florist Old Ford processes your personal data under the following lawful bases, as set out by the GDPR:

  • Contract: To fulfil your order and provide you with our products and services, we need to process certain personal data.
  • Legal Obligation: We may need to retain records to comply with applicable laws, such as retaining invoices for tax purposes.
  • Legitimate Interests: We may use your data to help improve our products and services, prevent fraud, and maintain security, provided such use does not override your rights and interests.
  • Consent: If you wish to receive marketing communications or offers, we will request your explicit consent, and you can withdraw this at any time.

How We Use Your Data

Your personal data is used to:

  • Process and deliver your flower orders efficiently.
  • Communicate with you regarding order status, delivery, or any issues with your purchase.
  • Respond to your enquiries, feedback, or complaints.
  • Maintain and improve our customer service and product offerings.
  • Comply with applicable legal and regulatory requirements.

How We Store and Retain Your Data

Your personal data is stored securely, whether electronically or in physical records. We implement suitable organisational and technical measures to protect your data from accidental loss, misuse, unauthorised access, alteration, or disclosure.

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for legal or regulatory compliance. Typically, customer order and transaction data will be kept for a period of up to seven years, to meet accounting and tax requirements. After this retention period, your data will be securely deleted or anonymised.

Processors and Third Parties

We may engage third parties (“processors”) to assist in providing some services necessary to fulfil your order or run our business operations. These may include:

  • Payment service providers: To securely process online or card payments. We never store your full payment card details.
  • IT service and support providers: To maintain and host our website, manage order processing systems, and provide customer management solutions.
  • Delivery service providers: To ensure timely and accurate delivery of your orders.
  • Professional advisors: Such as accountants or legal consultants, where necessary for business operations.

All processors are contractually bound to protect your data and act only on our instructions, in line with GDPR requirements.

Your Data Protection Rights

You have a number of important rights under data protection law. You can:

  • Access: Request access to the personal data we hold about you.
  • Rectification: Request correction of any inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data where there is no overriding reason for us to retain it (the ‘right to be forgotten’).
  • Restriction: Request limitation of how we use your data in certain circumstances.
  • Portability: Request transfer of your data to another provider in a structured, commonly-used format.
  • Objection: Object to processing of your data where we rely on legitimate interests or direct marketing.
  • Withdraw Consent: Where you have given consent (e.g., for marketing), you can withdraw this consent at any time.

If you would like to exercise any of these rights, or have questions about how we handle your data, please contact us using our standard contact methods. We may need to verify your identity before fulfilling your request.

Changes to this Privacy Policy

Florist Old Ford reviews its privacy practices regularly and may update this Privacy Policy from time to time. We will ensure any significant changes are communicated clearly. The latest version of this policy is always available upon request.

Contacting Us

If you have any questions about this Privacy Policy, your data protection rights, or how we handle your personal information, please contact Florist Old Ford via our usual customer communication channels. We aim to respond to all requests promptly and address any concerns you may have.