Florist Bromley Common Privacy Policy

Introduction

At Florist Bromley Common, your privacy is of utmost importance to us. This privacy policy outlines how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders through Florist Bromley Common from Bromley Common and its surrounding districts. Please read this policy carefully to understand your rights and our obligations regarding your personal information.

What Data We Collect

When you place an order with Florist Bromley Common, we collect the following categories of personal data:

• Identification Information: Your name and surname.
• Contact Details: Delivery address, billing address, phone number, and (when applicable) email address.
• Recipient Information: Name, delivery address, and (if provided) contact details of the recipient of the flowers or gifts.
• Order Information: Items purchased, order notes, greeting messages, special instructions, and payment method used (note: we do not store full payment card details).
• Communication Records: Correspondence with Florist Bromley Common related to your order, such as queries or complaints.
• Technical Data: Device, browser, and IP address data collected automatically when you use our website for purposes such as security, analytics, and order tracking.

Lawful Basis for Data Processing

Florist Bromley Common processes your personal data based on the following lawful bases, as provided by GDPR:

• Contractual Necessity: We process your data to fulfill our contract with you, including order processing, delivery, and customer service.
• Legal Obligation: We may process your data if required to comply with legal or regulatory obligations, such as tax and accounting requirements.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, fraud prevention, and maintaining security.
• Consent: In some instances, we process your data based on your consent, for example, when you opt-in to receive marketing communications. You can withdraw your consent at any time.

Data Retention

Your personal data is retained for only as long as necessary to fulfill the purposes outlined in this policy. Typical retention periods are outlined below:

• Order Information: Retained for up to six years after purchase, in compliance with accounting and tax obligations.
• Marketing Communications: Retained until you withdraw your consent or unsubscribe from marketing correspondence.
• Technical Data: Typically retained for up to two years for analytical and security purposes.

After these periods, data is securely anonymized or deleted unless we are legally required to retain it for a longer period.

Data Processors and Sharing

Your personal data may be disclosed to trusted third parties acting as data processors to facilitate our services and ensure the smooth fulfillment of your order. The types of processors we engage include:

• Payment Service Providers: For secure payment processing (credit/debit card providers, payment gateways).
• Delivery and Courier Companies: For the delivery of floral arrangements and gifts to recipients.
• IT and Website Support: For the maintenance, hosting, and security of our website and service platforms.
• Accounting and Legal Consultants: When necessary for compliance with finance or legal duties.

All processors are contractually obliged to protect your data in accordance with GDPR and may only process your data on our instructions, not for their own purposes. We do not sell or rent your personal data to third parties for marketing purposes.

International Data Transfers

Florist Bromley Common primarily stores and processes your personal data within the United Kingdom and the European Economic Area. If your data needs to be transferred outside these areas, we ensure that adequate safeguards are in place as required under GDPR, such as standard contractual clauses or equivalent data protection measures.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights concerning your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct or update your data if it is inaccurate or incomplete.
• Right to Erasure: You can request deletion of your data when it is no longer necessary for the purposes we collected it, or where you withdraw your consent.
• Right to Restrict Processing: You can request restriction of how we process your data in certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format to transfer to another service provider.
• Right to Object: You can object to processing based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we process your data on the basis of consent, you may withdraw your consent at any time.

If you wish to exercise any of these rights, please contact us using the details provided on our website or with your order confirmation. We will respond to your request within one month, or let you know if a longer period is required.

Data Security

We take the security of your data seriously. Florist Bromley Common uses physical, electronic, and administrative safeguards designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Access to your personal data is restricted to employees and contractors who need the information to fulfill your order or maintain our services. We regularly review and enhance our security measures in line with industry best practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our data processing practices or applicable laws. The most current version will always be available on our website. We recommend checking this page periodically for updates.

Contact and Complaints

If you have any questions or concerns about how we handle your data or if you wish to make a complaint, please contact us using the communication methods displayed on our website. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Thank you for choosing Florist Bromley Common. We are committed to protecting your privacy and personal data.