Wallington Florist Privacy Policy

Introduction

This Privacy Policy explains how Wallington Florist ("we", "us", or "our") processes your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. This policy applies to all customers placing orders with Wallington Florist from Wallington and surrounding districts. By using our services, you acknowledge and agree to the practices described within this policy.

Personal Data We Collect

We collect various types of personal data necessary to provide our services and fulfil your floral orders. The data we may collect includes:

• Identity Data: Your name and the name of the recipient.
• Contact Data: Billing and delivery addresses, telephone numbers, and, where provided, email addresses.
• Order Data: Details of products ordered, messages for gift cards, delivery instructions, occasion details (e.g., birthday, anniversary).
• Transaction Data: Details of payments and transactions (excluding full payment card details, which are handled securely by third-party processors).
• Technical Data: When you interact with our website, we may collect anonymised technical data such as IP address, browsing timestamps, device type, and referral sources, typically through cookies (as described in our separate Cookie Policy).

Lawful Basis for Processing

We collect and process your personal data only when there is a lawful basis to do so under the GDPR. These bases include:

• Contractual Necessity: To fulfil the floral order you have placed, communicate with you regarding your order, and arrange delivery. Without your data, we cannot complete your transaction.
• Legal Obligation: To comply with applicable legislation, such as tax and accounting requirements.
• Legitimate Interests: To improve our services, address customer enquiries, prevent fraud, and ensure the security of our services. Where we rely on legitimate interests, we always balance your rights and freedoms against our interests.
• Consent: In situations where we process data for direct marketing (e.g., newsletters), we do so only with your active consent, which you may withdraw at any time.

How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your order, including delivering your chosen floral products.
• To handle payments and manage invoices.
• To communicate with you regarding your order, any enquiries, or issues that arise.
• To improve our services and customer experience.
• To comply with legal and regulatory obligations.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods are:

• Order and Transaction Data: Typically retained for six years after the transaction, in line with legal and tax requirements.
• Marketing Data: If you opt-in to marketing communications, we retain this data until you withdraw consent or request deletion.
• Customer Service Communications: Retained for up to two years after resolution to help resolve future queries and improve our service.

Data Processors and Third Parties

In order to provide our services, we sometimes engage reputable third-party processors for specific functions. These may include:

• Payment Processors: We use secure third-party providers to process payments. We do not ourselves store full payment card details.
• IT Service Providers: Companies that support our website, e-commerce system, and data storage. Your data may be stored on secure cloud servers within the UK or the European Economic Area (EEA).
• Delivery Partners: Where necessary, we share limited information with third-party couriers if they are engaged to deliver orders outside our local area.

We require all third-party processors to respect the security and confidentiality of your data and to comply with the GDPR. We do not sell, rent, or otherwise share your personal information with other organisations for their own marketing purposes.

International Transfers

Wallington Florist stores most personal data within the UK or the EEA. Should data ever need to be processed outside these areas, we ensure appropriate safeguards are in place to protect your rights, such as contracts based on standard data protection clauses approved by the UK Information Commissioner’s Office or the European Commission.

Your Rights

Under the GDPR, you have rights regarding the personal data we hold about you. At any time, you can exercise your rights which include:

• Right of Access: You have the right to obtain a copy of your personal data we hold and details of how we process it.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, where there is no overriding legal reason for us to retain it.
• Right to Restrict Processing: You can request our processing of your data be limited in certain circumstances.
• Right to Object: You can object to our processing of your data where we rely on legitimate interests or where the data is processed for direct marketing purposes.
• Right to Data Portability: You can receive the personal data you have provided to us in a structured, commonly used format, and have the right to have that data transmitted to another controller where technically feasible.

If you wish to exercise any of these rights, or have questions about your personal data, please contact us using the details provided on our website.

Security of Your Data

We prioritise the security of your personal data. Appropriate technical and organisational measures are implemented to protect your information from unauthorised access, disclosure, alteration or destruction. While we employ commercially reasonable safeguards, no system is completely secure; the transmission of information is at your own risk.

Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our business practices. Any changes will be posted on our website. Where updates materially affect your rights and interests, we will take reasonable steps to notify you.

Contact Us

If you have any questions about this Privacy Policy or the way we handle your personal information, please use the contact options on our website to get in touch with our team.

Thank you for choosing Wallington Florist. We value your trust and are committed to protecting your privacy.