Florist Barkingside GDPR Privacy Policy
Privacy Policy: Customer Orders in Barkingside & Surrounding Areas
This privacy policy sets out how Florist Barkingside collects, processes, stores, and safeguards personal information for all customers placing orders with Florist Barkingside in Barkingside and the surrounding districts. We are fully committed to complying with the General Data Protection Regulation (GDPR) and respecting your privacy rights.
Purpose of This Policy
This policy applies to all individuals—both private and business customers—who place orders with Florist Barkingside. It explains what personal data we collect, the lawful basis for processing it, how long we keep it, who we share it with (including processors), and your legal rights regarding your data.
What Data Do We Collect?
To provide flower delivery and related services, Florist Barkingside may collect the following information as part of the ordering process or when you make enquiries:
- Contact and Identification Data: Name, address (for both sender and recipient), contact telephone number, and delivery address details.
- Order Information: Details of the products or services ordered, delivery instructions, and special preferences.
- Payment Information: Payment method details (note: full card/payment details are securely handled by payment processors and not stored by Florist Barkingside).
- Communication Data: Any emails, letters, notes, or feedback you provide related to your order.
Lawful Basis for Processing
Under GDPR, we must have a lawful reason for processing personal data. For Florist Barkingside, such reasons include:
- Performance of a Contract: Most of the data we collect is needed to fulfil your order with us.
- Legal Obligation: We may need to retain certain information for our records and to comply with legal or tax requirements.
- Legitimate Interests: For example, to follow up on your enquiries, handle complaints, or improve our services (provided those interests are not overridden by your rights).
- Consent: In rare cases, such as sending marketing material, we process your data only if you have given explicit permission.
How We Use Your Personal Data
Your personal data is used strictly for the purposes of:
- Processing your orders and payments
- Managing delivery and arrangements, including communications with you
- Responding to queries, complaints, or requests
- Complying with our legal and regulatory responsibilities
- Improving our services (in anonymised or aggregated form when possible)
Who Has Access and Data Processors
Access to your personal data is strictly limited:
- Florist Barkingside team members accessing details only as necessary to complete your order or handle your enquiry.
- Third-Party Data Processors: Some data may be processed by trusted third parties, including payment processing services, IT support, and delivery service providers. These companies act as data processors and are required to keep your information secure and confidential, and only to act under our instructions.
- We do not sell or share your data with third parties for their own marketing purposes.
Data Retention: How Long Do We Keep Your Data?
Florist Barkingside retains your personal data only for as long as necessary for the purposes described above:
- Order and Contact Data: Typically for up to 6 years to comply with accounting and legal requirements.
- Payment Method Information: Never stored directly by Florist Barkingside, handled by our payment processors in accordance with their own retention policies.
- Communications: Retained for as long as necessary to resolve your enquiry or complaint, usually not exceeding 2 years unless required for legal reasons.
When your data is no longer required, it is securely deleted or anonymised.
Your GDPR Rights
As a customer with Florist Barkingside, you are entitled to exercise the following GDPR rights relating to your personal data held by us:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct or update inaccurate or incomplete data.
- Right to Erasure: You can request deletion of your data where we have no legitimate reason to continue processing it.
- Right to Restrict Processing: In some cases, you can ask us to restrict use of your data.
- Right to Data Portability: You can ask for a transferable copy of your data.
- Right to Object: You can object to processing based on our legitimate interests.
- Right to Withdraw Consent: Where you have given consent, you can withdraw it at any time.
- Right to Lodge a Complaint: If you believe your rights have not been upheld, you have the right to complain to a supervisory authority.
Security Measures
Florist Barkingside employs appropriate technical and organisational measures to ensure your personal data is secure and protected against unauthorised access, accidental loss, alteration, or disclosure. This includes staff awareness training, secure storage, and regular data handling reviews.
Policy Updates
This privacy policy may be reviewed and updated from time to time to ensure ongoing compliance. If any significant changes are made, customers will be notified where appropriate.
Contacting Us
If you have questions about this privacy policy or wish to exercise your GDPR rights, please contact Florist Barkingside using the contact methods available via our official website or written correspondence address.
