Florists Brompton Privacy Policy for Customers

Introduction

This Privacy Policy explains how Florists Brompton ("we", "us", "our") collects, uses, and protects your personal data when you place orders with us, whether online, by telephone, or in-person. This policy applies to all customers placing orders from Brompton and the surrounding districts. We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (GDPR).

What Data We Collect

When you interact with Florists Brompton, we may collect, store, and use the following categories of data:

• Contact Information: Name, delivery address, billing address, and telephone number.
• Order Details: Details of your flower order, delivery instructions, personal greetings or messages, and purchase history.
• Payment Information: Payment card details are processed securely by our payment processor (we do not store card numbers).
• Correspondence: Any communications or feedback you send to us, including emails or notes added to your order.
• Technical Data: Limited information about your visit to our website, such as browser type, device, and IP address, collected via cookies or analytics tools (where applicable).

Lawful Basis for Processing Personal Data

We rely on the following lawful bases under the UK GDPR to process your personal information:

• Contractual Necessity: Most of the data we collect is necessary to fulfil your order and obligations arising from any contract between you and Florists Brompton. For instance, we need your delivery address and contact details to deliver your flowers.
• Legitimate Interests: We may use your information to improve our products and services, ensure security, keep records, and respond to your enquiries where these interests do not override your fundamental rights.
• Legal Obligations: Some data processing is required to comply with our legal and regulatory duties, such as maintaining tax or business records.
• Consent: For any marketing communications (such as special offers or newsletters), we will only contact you when you have actively provided consent, which you may withdraw at any time.

How We Use Your Data

Your personal information is used to:

• Process and deliver your orders efficiently.
• Respond to your enquiries or requests.
• Handle payments and refunds securely.
• Maintain our own records and accounts as required by law.
• Enhance and personalise your customer experience.
• Where you have consented, send you relevant marketing information and updates from Florists Brompton.

Retention of Personal Data

We retain your personal data only for as long as is necessary for the purposes outlined in this policy:

• Order and payment records are typically retained for up to seven years, in line with statutory retention requirements for financial records.
• Customer account and contact information are kept as long as you have an active relationship with us, or until you request deletion.
• Marketing consent data is retained only as long as you are subscribed or until you withdraw your consent.
>
• Order-related correspondence or feedback may be retained for up to two years to improve service and resolve any future queries.

Who Processes Your Data

We may engage certain data processors and trusted third parties in handling your information, always under strict contractual controls:

• Payment Partners: Card payment processors handle transactions securely and in compliance with industry standards. We do not retain or access your payment card details.
• IT Systems: Data hosting providers securely store order and account information in data centres located within the UK or EEA.
• Delivery Partners: Where required, details necessary for delivery are shared with our own staff or trusted couriers to ensure completion of your order.
• Professional Advisors: Accountants and legal advisors may access limited data where required by law or in defending our business interests.

We do not sell or share your personal data with third-party marketers. We require all third parties to respect the security of your data and to treat it in accordance with the law.

Your Data Protection Rights

As a data subject under the UK GDPR, you have certain rights regarding your personal data:

• Right of Access: Request a copy of personal data we hold about you.
• Right to Rectification: Request corrections to any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (subject to statutory or contractual retention requirements).
• Right to Restrict Processing: Ask us to pause or limit the processing of your data under certain circumstances.
• Right to Object: Object to certain processing activities, such as direct marketing.
• Right to Data Portability: Request that your data be transferred to another organisation or provided to you in a structured, commonly used format.
• Right to Withdraw Consent: Where our processing is based on your consent (for example, marketing), you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided in-store or on our website. We may need to verify your identity before we act on your request.

Data Security Measures

Florists Brompton is committed to safeguarding your information. We use reasonable administrative, technical, and physical measures to protect the data we collect from unauthorised access, alteration, disclosure, or destruction. Our online ordering system uses secure protocols and encryption where applicable, and all staff are trained on data protection responsibilities.

Policy Applicability and Updates

This Privacy Policy applies to all personal data collected for customers placing orders in Brompton and surrounding districts. We reserve the right to update or revise this Privacy Policy from time to time to reflect changes in our practices or for compliance with legal requirements. We encourage you to review this policy periodically. All changes will be posted on our website and available in-store.

Contact and Queries

If you have any questions about this Privacy Policy or how your data is being processed at Florists Brompton, please contact us in person at our shop or via our website. We will respond to your enquiry in line with data protection laws.