Florist Alperton Privacy Policy
Introduction
This Privacy Policy explains how Florist Alperton collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). We are dedicated to maintaining your trust and ensuring utmost transparency when you place an order with us. This policy applies to all individuals who order products or services from Florist Alperton within Alperton and surrounding districts.
What Personal Data We Collect
When you engage with Florist Alperton, we may collect different types of personal data, depending on your relationship and interactions with us. This may include:
- Identity Information: Full name, title, and contact details such as address, phone number (if provided), and delivery address.
- Order Details: Product selections, purchase history, order instructions (including message cards), and preferred delivery dates.
- Payment Information: Payment method and transaction details (note: card payments may be securely processed via third-party providers; we do not store your payment card details).
- Communications: Email or written correspondence regarding your orders, feedback, and any customer support queries.
- Technical Data: IP address, device type, and browsing activity when you access our website, typically collected through cookies for site functionality and analytics.
Lawful Basis for Processing Your Data
Florist Alperton processes your data under the following lawful bases as defined in the GDPR:
- Contractual Necessity: So we can fulfill your orders, deliver flowers, process payments, and provide customer service.
- Legal Obligation: To comply with accounting, tax, and regulatory requirements.
- Legitimate Interests: To improve our products, services, and website experience, and for limited, relevant marketing communications (subject to your preferences).
- Consent: For certain types of communications, or where required by law, we rely on your explicit consent. You may withdraw this consent at any time.
How We Use Your Personal Data
We use your personal data to:
- Process and fulfill your orders, including arranging delivery.
- Manage payments, refunds, or queries about your purchase.
- Communicate order confirmations, status updates, and respond to your questions.
- Send service-related notifications and, where permitted, limited marketing about our products and offers.
- Improve our website, grow our business, and ensure customer satisfaction.
- Comply with legal and financial obligations.
Retention of Your Personal Data
Florist Alperton will retain your personal data only for as long as reasonably necessary to fulfill the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. Typically, we retain order details for up to 6 years to meet financial and regulatory obligations. Data used solely for direct marketing will be kept until you opt-out or withdraw consent. After the retention period, your data will be securely deleted or anonymised.
Data Processors and Sharing Information
We may engage trusted third-party service providers to assist with:
- Processing payments and fraud prevention
- Website hosting and security
- Order fulfillment and delivery logistics
- Email communication tools and customer feedback
All processors are contractually bound to handle your data securely and in compliance with GDPR. Florist Alperton does not sell your personal data or transfer it to countries outside the UK or EU unless adequate safeguards are in place. We will disclose your information only when required by law or to protect our rights and security.
Your Rights Under GDPR
As a data subject, you have several rights under GDPR. These include:
- Right of Access: You may request confirmation of whether your data is being processed and obtain a copy of your information.
- Right to Rectification: If your personal data is inaccurate or incomplete, you may ask us to correct or complete it.
- Right to Erasure: In certain circumstances, you can request the deletion of your personal data.
- Right to Restrict Processing: You can ask us to restrict how we use your data in specific situations.
- Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
- Right to Data Portability: Where technically feasible, you can ask to receive your personal data or have it transferred to another provider.
- Right to Withdraw Consent: If we rely on your consent, you have the right to withdraw it at any time.
- Right to Lodge a Complaint: You may lodge a complaint with a supervisory authority if you believe your data rights are being infringed.
To exercise your rights, please contact Florist Alperton through our standard communication channels. We will respond promptly and in accordance with the relevant data protection legislation.
Protecting Your Personal Data
We implement appropriate technical and organisational measures to safeguard your personal data against accidental loss, unauthorised use, or access. Such measures include regular staff training, secure password-protected systems, and regular data audits. While we strive to protect your information, no system can guarantee absolute security. Should we ever suffer a data breach that may affect your rights or freedoms, we will inform you and the relevant authority where required by law.
Children’s Data
Our services are not designed for children under the age of 16. We do not knowingly collect or process information from individuals under this age. If we become aware that information from a child has been collected inadvertently, we will promptly delete it.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be published on our website and will become effective upon posting. Material changes will be brought to your attention where appropriate.
Contacting Florist Alperton
If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us via the methods available on our website or speak to a member of staff in-store. We are committed to maintaining your privacy and protecting your data according to current laws and best practices.
