West Green Florist Privacy Policy

Introduction

This Privacy Policy explains how West Green Florist collects, uses, stores, and protects your personal data when you place an order with us. The policy applies to all customers ordering from West Green Florist in West Green and surrounding districts. We are committed to handling your information responsibly and in accordance with the General Data Protection Regulation (GDPR).

Personal Data We Collect

To fulfil your order and provide our services, we collect the following categories of personal data:

• Contact Information: This includes your full name, delivery address, billing address, and phone number.
• Order Information: Details of items purchased, delivery instructions, and any notes or preferences you provide.
• Payment Information: Methods and transaction information used for payment. Please note: we do not store full payment card numbers, as payments are processed via secure third-party providers.
• Correspondence: Any communications, queries, or complaints you send to us regarding your order or our services.
• Technical Data: When ordering via our website, we may collect IP addresses, cookie data, and browser type to ensure website security and performance.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. The legal grounds on which we rely are:

• Contractual Necessity: Processing your data is necessary for fulfilling your order and providing requested services (Article 6(1)(b) GDPR).
• Legal Obligation: We may be required to process certain data to comply with legal and regulatory requirements (Article 6(1)(c) GDPR).
• Legitimate Interests: Processing may be necessary for our legitimate business interests (such as fraud prevention, improving our services, and direct marketing), provided these are not overridden by your rights and freedoms (Article 6(1)(f) GDPR).
• Consent: If required, we will collect your explicit consent for specific uses, such as opting in to receive marketing communications. You can withdraw your consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and delivering your orders.
• Managing payments, fees, and charges.
• Communicating with you regarding your order, customer support, and responding to your requests.
• Notifying you about updates to our services or policy changes.
• Improving our products, services, and website performance.
• Upholding the security and integrity of our services and detecting fraudulent activity.

Retention of Your Data

We retain your personal data only as long as necessary for the purposes set out in this policy, including satisfying any legal, accounting, or reporting obligations. The retention periods vary depending on the category of data and relevant legal requirements. Generally, we retain order-related data for up to seven years to comply with taxation and accounting regulations. After this period, your data is securely deleted or anonymized so it can no longer be associated with you.

Data Processors and Third Parties

We share your personal data with third-party service providers only where necessary to process your order and deliver our services. These may include:

• Payment processors: For secure online transactions.
• Delivery partners and couriers: To fulfil your order and deliver flowers to your chosen address.
• IT service providers: For website hosting, system maintenance, and data backup.
• Professional advisers: Including legal or financial consultants, where necessary for compliance and our legitimate interests.

All third-party processors are required to handle your data in accordance with the GDPR and our instructions. We do not sell or disclose your personal data to unrelated third parties for their own marketing purposes.

Your Data Protection Rights

Under the GDPR, you have several rights relating to your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: Also known as the 'right to be forgotten', you can request deletion of your data, subject to certain conditions.
• Right to Restriction: You can request we restrict the processing of your personal data in specific circumstances.
• Right to Data Portability: You can ask us to provide your data in a structured, commonly used format for transferring to another service provider.
• Right to Object: You have the right to object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, or if you have questions about your data or this policy, please contact us using the contact options provided on our website or in-store. We will respond to your request in accordance with applicable laws.

Data Security

West Green Florist takes the security of your personal information seriously. We implement appropriate physical, electronic, and organizational measures to safeguard your data from unauthorised access, alteration, disclosure, or destruction. We regularly review our security practices and require our third-party processors to comply with industry standards and legal requirements.

International Transfers

Your personal data is usually stored within the United Kingdom and European Economic Area (EEA). If, in rare cases, we need to transfer your data outside the EEA, we ensure that adequate safeguards are in place to protect your information and comply with the GDPR.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updated versions will be posted on our website and will be effective upon posting. You are encouraged to check the policy periodically.

Contacting West Green Florist

If you have any questions, concerns, or wish to exercise your rights relating to your personal data, please contact us through the available methods on our website or by visiting our shop in person. We are committed to resolving any issues promptly and to your satisfaction.