Florist Wimbledon Privacy Policy – Data Use and Your Rights

Overview and Scope of Policy

This Privacy Policy outlines how Florist Wimbledon ("we," "us," or "our") collects, uses, stores, and safeguards your personal data in connection with floristry orders placed by customers in Wimbledon and surrounding districts. The Policy also details your rights under the General Data Protection Regulation (GDPR) and applies to anyone placing an order through our services in these areas.

Data We Collect

To provide our floral arrangements and related services effectively, we collect the following categories of personal data from our customers:

• Contact Information: Name, delivery address, telephone number, and other relevant contact details required for delivery and communication.
• Order Details: Information relevant to your order, such as flower preferences, special requests, and instructions for delivery.
• Payment Information: Payment transaction details (although we do not store your card numbers directly, they are processed by our payment processor).
• Correspondence: Communications with our team, including order confirmations, queries, and feedback.
• Technical Data: IP address, browser type, and usage data for website analytics and service improvement.

Lawful Basis for Processing Data

We collect and process your personal data based on the following GDPR lawful bases:

• Performance of a Contract: To fulfil and deliver your order as requested.
• Legal Obligations: For tax, accounting, and legal compliance.
• Legitimate Interests: To improve our service delivery, manage our business, prevent fraud, and ensure security.
• Consent: Where required, we may request your consent, particularly for direct marketing communications unrelated to your existing orders. You have the right to withdraw your consent at any time.

How We Use Your Data

Your information enables us to process transactions, deliver floral products, respond to enquiries, resolve disputes, comply with legal requirements, and send you relevant updates about your orders. We may also use anonymous technical data to enhance our website and service offerings.

Data Retention

We retain your personal data only for as long as necessary for the purposes it was collected:

• Order and Transaction Data: Retained for up to seven years to satisfy legal, accounting, and tax requirements.
• Marketing Preferences: Data related to your marketing preferences is kept until you withdraw your consent or opt out.
• Enquiries and Correspondence: Retained for up to two years after the final resolution of an enquiry, unless further retention is required by law.

At the end of the retention period, your information is securely deleted or anonymised.

Processors and Data Sharing

We may share your personal data with selected third parties acting as data processors. These may include payment service providers, delivery partners, IT support services, suppliers, and website hosting providers. All processors are contractually obliged to handle your data securely and in compliance with GDPR; they may only process your data for specified purposes on our instructions.

We do not sell or rent your data to any third parties. Data is only transferred outside the European Economic Area (EEA) where adequate protections are in place in line with GDPR requirements.

Your Rights Under GDPR

As a customer, you have several important rights concerning your personal data:

• Right of Access: Request access to your personal data held by us.
• Right to Rectification: Request correction of incorrect or incomplete data.
• Right to Erasure: Request deletion of your data under certain conditions.
• Right to Restrict Processing: Request restriction of processing in specific scenarios.
• Right to Data Portability: Obtain and transfer your data to another service provider.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.
• Right to Lodge a Complaint: If you believe we have not handled your data correctly, you have the right to complain to the data protection authority.

To exercise any of these rights, please contact us using the details provided on our website. We may require you to verify your identity before fulfilling your request for your protection.

Security Measures

We take all appropriate and reasonable technical and organisational measures to protect your data against accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. These include data encryption, secure access controls, regular audits, and staff training on data protection obligations.

Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe we have collected information from your child, please notify us, and we will take steps to delete such data promptly.

Changes to This Privacy Policy

We may amend this Privacy Policy to reflect legal, technical, or business developments. The latest version will always be available on our website. Your continued use of our services indicates your acceptance of the Policy as updated.

Contact and Further Information

If you have any questions, concerns, or wish to exercise your data rights regarding this Policy, please refer to the contact information provided on our website. We are committed to addressing your concerns in a prompt and transparent manner.

This Policy is effective as of June 2024 and applies to all customers placing Florist Wimbledon orders from Wimbledon and neighbouring districts.