Florist Charing Cross GDPR Privacy Policy

Introduction

This Privacy Policy outlines how Florist Charing Cross (“we”, “us”, or “our”) collects and processes personal data from customers placing orders from Charing Cross and surrounding districts. We are committed to upholding your privacy and processing personal information in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable UK data protection laws. Please read this policy carefully to understand how we handle your data and your rights relating to it.

Scope of This Policy

This policy applies to all individuals who place orders with Florist Charing Cross, whether by phone, online, or in person, and who are located in Charing Cross and surrounding districts. By placing an order, you acknowledge and agree to the practices described in this Privacy Policy.

Personal Data We Collect

We collect the following categories of personal information to fulfil orders and provide services:

• Identity Data: Name (customer and/or recipient), title
• Contact Data: Billing and delivery address, email address, telephone number
• Order Data: Details of products ordered, order notes, and delivery instructions
• Payment Data: Payment method, card type (we do not store full card details)
• Transaction Data: Payment amounts, transaction dates, invoice details
• Marketing Preferences: Your stated preferences about receiving marketing communications from us
• Device/Usage Data: If you place orders via our website, technical data such as IP address, browser type, device information, and cookies

Lawful Basis for Processing

Florist Charing Cross processes your personal data according to the following lawful bases under the GDPR:

• Contractual Necessity: Much of the data collected is required to fulfil your order, deliver products, and process payment.
• Legal Obligation: We retain some information to comply with our legal and regulatory obligations (for example, record-keeping and tax).
• Legitimate Interests: Certain data may be processed for legitimate business interests, such as improving our services, preventing fraud, or handling customer queries. We ensure that such processing does not override your rights and freedoms.
• Consent: Where required, such as sending you marketing materials, we rely on your explicit consent, which you may withdraw at any time.

How We Use Your Data

We use your personal data for the following purposes:

• To process and deliver your orders
• To communicate delivery updates and order status
• To address customer service enquiries and resolve issues
• To personalise your experience and enhance our products and services
• To meet legal and tax obligations
• To send direct marketing, only where you have consented
• To detect and prevent fraud or misuse of our services

Sharing and Processing with Third Parties

We do not sell your personal data. For the purposes listed above, we may share limited personal information with trusted third-party data processors, strictly as necessary and with appropriate contractual safeguards. These processors include:

• Payment service providers who securely process payments on our behalf
• Delivery and courier partners to deliver your orders
• IT service providers that help operate our website and manage our booking systems
• Professional advisors (accountants, legal advisors) where necessary for compliance and legal advice

We require all processors to take appropriate security measures and to process your data only for specified purposes and in accordance with our instructions.

International Transfers

We do not routinely transfer your personal data outside the United Kingdom or the European Economic Area (EEA). Should such a transfer be necessary (for example, due to a technical service provider), we will ensure that such transfers are subject to appropriate safeguards in line with GDPR requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order-related information is retained for up to seven years from your order date, to comply with accounting and tax regulations. After this period, your data is securely deleted or anonymised. Data provided solely for marketing communications will be kept until you withdraw your consent or object to processing, whichever occurs first.

Data Security

The security of your personal information is important to us. We use technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These include restricted access controls, encryption, secure payment processing, and regular system monitoring.

Your Rights under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data and information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete data we hold about you.
• Right to Erasure: Request deletion of your data when there is no reason for us to continue processing it.
• Right to Restrict Processing: Request that we suspend processing in certain circumstances.
• Right to Data Portability: Request a copy of your data in a structured, commonly-used format and have it transferred to another provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.
• Right to Complain: Lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been breached.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. Changes will be effective upon publication on our website. We encourage you to review this policy regularly to stay informed of how we protect your information.

Contacting Us

If you have questions regarding this Privacy Policy or wish to exercise any of your rights, please contact us through the methods provided on our website or in-store. We take all privacy-related queries seriously and will respond in a timely manner.