St Paul's Cray Florist Privacy Policy

Introduction

This Privacy Policy describes how St Paul's Cray Florist collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all individuals placing orders with St Paul's Cray Florist, whether residing in St Paul's Cray or the surrounding districts.

What Personal Data We Collect

When you interact with St Paul's Cray Florist, we collect specific personal data to facilitate your orders and improve our services. The types of data we may collect include:

• Identification Data: Name, address, and contact details (such as phone number and postal address)
• Order Data: Purchase history, order preferences, recipient information (where relevant)
• Payment Data: Transaction and billing information (we do not store full payment card details)
• Communication Data: Correspondence with us regarding orders, feedback, or support queries
• Technical Data: Information about how you interact with our website, such as IP address and browser type, collected via cookies (where consented)

Lawful Basis for Processing Your Data

Under the GDPR, we rely on different lawful bases for processing your personal data:

• Performance of a Contract: We process your identification, order, and payment data in order to fulfil your flower orders and provide requested services.
• Legal Obligations: We are required by law to retain certain transaction and invoicing details for tax and accounting purposes.
• Legitimate Interests: Where necessary, we process your data to improve our services, handle queries, and send important order updates. We always balance our interests with your privacy rights.
• Consent: We may ask for your consent to send you marketing communications or to use non-essential cookies. Where consent is given, you can withdraw it at any time.

How We Use Your Personal Data

Your personal data helps us to:

• Process and deliver your orders
• Communicate order updates or queries
• Handle payment and fulfil accounting/legal obligations
• Respond to your feedback or queries
• Improve the quality of our products and customer experience
• Send you special offers or updates (where you have consented)

Disclosure and Data Processors

St Paul's Cray Florist treats your personal data with care. Occasionally, we share your data with trusted third-party processors to help provide our services, such as:

• Delivery Partners: To ensure successful delivery of your orders
• Payment Processors: To securely process your payments
• IT Service Providers: To maintain website security and performance

All third-party service providers are contractually bound to comply with relevant data protection laws and use your information only as necessary to provide their services.

We do not sell or rent your personal information to third parties for marketing purposes.

Data Retention

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Typically:

• Order and transaction data are kept for up to 7 years to comply with tax and legal obligations.
• Marketing preferences and consent history are retained until you withdraw your consent or request deletion.
• Technical data and correspondence are retained for an appropriate period to improve services and resolve disputes.

When data is no longer required, it will be securely deleted or anonymized.

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: You may request detail of the personal information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your data where it is no longer needed or where consent has been withdrawn.
• Right to Restrict Processing: You can ask us to restrict how we process your information in certain circumstances.
• Right to Data Portability: You may request to receive the personal data you have supplied to us in a commonly used format.
• Right to Object: You can object to our processing if you believe we are not acting according to your interests or in compliance with the law.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the methods available on our official website or written correspondence. You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data rights have been infringed.

Security of Your Data

St Paul's Cray Florist takes data security seriously. We use up-to-date technical and organizational measures to protect your personal data against loss, unauthorized access, and misuse. Only staff and authorized partners with a need to access your information will be permitted to do so.

International Data Transfers

In general, we store and process your data within the United Kingdom and European Economic Area (EEA). Where it is necessary to transfer data outside of these territories, we ensure that suitable safeguards are in place, such as standard contractual clauses or other permitted mechanisms under GDPR.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in law, technology, or our services. We encourage you to check this page periodically. Significant changes will be highlighted where appropriate.

Contact and Complaints

If you have questions or concerns regarding how we handle your personal information, or if you wish to exercise any of your GDPR rights, please refer to our website for methods to contact us by post or through our online contact form. We are committed to addressing all queries promptly and responsibly.