Florist Whetstone Privacy Policy

Introduction

This Privacy Policy sets out how Florist Whetstone ('we', 'us', or 'our') collects, uses, discloses, and protects your personal information when you place an order with us from Whetstone and surrounding districts. We are committed to handling your data in accordance with the General Data Protection Regulation (EU) 2016/679 ('GDPR') and other applicable data protection laws. This policy is intended for all customers who use our services, whether online, by phone, or in person.

What Data We Collect

We may collect and process the following types of personal data about you, depending on how you interact with us:

  • Identification details: such as your name and, if applicable, the recipient’s name.
  • Contact information: including address, telephone number, and delivery address.
  • Order details: including the items ordered, special instructions, messages, and order history.
  • Payment details: such as payment method and partial card details (note that we do not store full card numbers; these are handled securely by our payment processors).
  • Communication data: records of communications you have with us, including queries, complaints, and feedback.
  • Technical information: where you use our website, we may collect your IP address, browser type, and usage statistics through cookies and similar technologies (please see our Cookies Policy for more details).

Lawful Basis for Processing

We only process your personal data where we have a valid lawful basis under GDPR. Depending on the specific processing activity, this may include:

  • Contractual necessity: To process your orders, provide delivery services, and respond to your requests.
  • Legal obligation: To comply with applicable laws (for example, record-keeping and tax requirements).
  • Legitimate interests: To improve our services, communicate with you about your order, or prevent fraud, provided these interests do not override your rights.
  • Consent: Where required, such as for direct marketing or certain types of cookies, we will seek your explicit consent.

How We Use Your Personal Data

We use your information for the following purposes:

  • To process and fulfil your orders, including arranging for delivery of purchased items.
  • To communicate with you regarding your order, including confirmation, updates, and customer support.
  • For internal record keeping and accounting.
  • To comply with legal and regulatory obligations.
  • To improve our services, enhance your customer experience, and address any complaints or queries.
  • If you consent, to send you occasional marketing communications that may be of interest to you.

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and our legal obligations. For order information, we will typically retain data for six years after your transaction for tax and accounting purposes. If you request deletion of your data, we will comply unless we are legally obliged to retain it.

Data Processors and Third Parties

To deliver our services, we may share your personal data with trusted third-party processors, including:

  • Delivery partners: for fulfilling and delivering your order.
  • Payment service providers: to securely process your payments.
  • IT service providers and website hosting: to support our digital infrastructure.
  • Accountants and professional advisors: for legal and financial compliance.

All third-party processors are required to act only on our instructions and are subject to appropriate confidentiality and security obligations. We do not sell or rent your personal data to any third parties for marketing purposes.

International Data Transfers

We strive to store and process your data within the United Kingdom and the European Economic Area (EEA). If data must be transferred outside of these areas, we ensure adequate safeguards are in place, such as standard contractual clauses, to protect your information.

How We Protect Your Data

We take appropriate technical and organisational measures to safeguard your personal data, including secure storage, access controls, and data encryption where necessary. We regularly review our security measures to ensure the ongoing integrity, confidentiality, and availability of your personal information.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data held by Florist Whetstone:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request correction of any inaccuracies in your personal data.
  • Right to erasure: In certain circumstances, you may request the deletion of your personal data.
  • Right to restrict processing: You can ask us to limit how we use your personal data.
  • Right to data portability: You have the right to request that we transfer your data to another organisation, where technically feasible.
  • Right to object: You can object to our processing of your data based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where consent is the lawful basis, you have the right to withdraw your consent at any time.
  • Right to lodge a complaint: You have the right to complain to a supervisory authority if you believe your data has been unlawfully processed.

To exercise any of these rights, please contact us using the contact options made available on our website or via your usual means of contacting us.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. The updated version will be published on our website with the date of revision indicated. Please check this page regularly to stay informed about how we protect your data.

Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch using our published contact details.

This Privacy Policy applies to all customers of Florist Whetstone placing orders from Whetstone and the surrounding districts.