Ardleigh Green Florist GDPR Privacy Policy
Privacy Policy for Ardleigh Green Florist Orders
This Privacy Policy outlines how Ardleigh Green Florist collects, uses, stores, and protects your personal data when you place orders with us in Ardleigh Green and the surrounding districts. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).
Scope of This Policy
This policy applies to all customers placing orders with Ardleigh Green Florist, whether online, by phone, or in person, and covers services provided in Ardleigh Green and surrounding districts. By using our services or ordering from us, you acknowledge that you have read and understood this Privacy Policy.
What Data We Collect
We collect and process the following types of personal data:
- Contact Information: Name, delivery address, billing address, telephone number, and relevant contact details for communication and delivery.
- Order Information: Details of your flower orders, special requests, messages to recipients, and order history.
- Payment Information: Payment method details (such as card information; these may be processed by our third-party payment providers and are not stored by us).
- Communications Data: Correspondence between you and Ardleigh Green Florist, including enquiries, feedback, or complaints.
- Technical Data (if ordering online): IP address, browser type, and device data collected through cookies necessary for website functionality.
Lawful Basis for Processing Personal Data
We process your personal data for the following lawful reasons under the GDPR:
- Contractual Necessity: To fulfil and manage your orders and deliver products and services as requested by you.
- Legal Obligation: To comply with legal requirements, such as tax and accounting regulations.
- Legitimate Interests: To improve our service, address your enquiries, and prevent fraud, provided these interests do not override your fundamental rights and freedoms.
- Consent: Where required, we will seek your explicit consent (for instance, for marketing communications). You have the right to withdraw your consent at any time.
How We Use Your Data
Your personal data is used for the following purposes:
- To process and deliver your orders to the specified address
- To contact you in relation to your order, including confirming, updating, or addressing delivery issues
- To handle enquiries, feedback, or complaints
- To keep our accounting and financial records in line with legal requirements
- To improve our services and customer experience
- To comply with legal and regulatory obligations
- If you have consented, to send updates and offers relevant to Ardleigh Green Florist
How Long We Hold Your Data (Data Retention)
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or to comply with legal, accounting, or regulatory requirements. Typically, this is:
- Order and Delivery Information: Retained for up to 6 years to comply with tax and contractual obligations.
- Marketing Data: Retained until you opt out or withdraw consent.
- Technical Data: Retained for a limited period necessary for the operation and improvement of our site.
Data will be securely erased or anonymised once it is no longer needed for these purposes.
Third-Party Processors and Data Sharing
In some cases, we use trusted service providers (processors) to facilitate payment processing, order management, website hosting, and delivery. The types of third parties include:
- Payment processing providers
- Delivery partners or couriers
- IT support and website hosting providers
- Accounting and auditing services
All third-party processors are carefully selected. We require them to respect the security of your personal data and to treat it in accordance with the law. We do not allow our processors to use your personal data for their own purposes and ensure data is only processed for the specified purposes and in accordance with our instructions.
Your data is never sold or shared with third parties for marketing purposes without your explicit consent.
Security of Your Personal Data
We take appropriate technical and organisational measures to safeguard your personal data, including using secure storage systems, limited access, encryption, and regular data security reviews. While we strive to protect your information, no method of transmission over the Internet or method of electronic storage can be 100% secure; therefore, we cannot guarantee absolute security.
Your Data Protection Rights
Under the GDPR, and subject to applicable law, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of your personal information if it is inaccurate or incomplete.
- Right to Erasure: You may request deletion of your data in certain circumstances.
- Right to Restrict Processing: You can request that we limit how your data is processed.
- Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes.
- Right to Data Portability: You can request to receive your data in a structured, commonly used format and have it transferred to another controller where technically possible.
- Right to Withdraw Consent: If we process your data based on your consent, you can withdraw consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been breached.
Policy Updates
This policy is reviewed regularly and may be updated to ensure continued compliance with data protection laws. We will notify users of significant changes where appropriate.
Contact for Data Protection Queries
If you have any questions about this Privacy Policy or how Ardleigh Green Florist handles your personal data, please refer to our website's contact page to get in touch. We are committed to resolving any issues regarding your privacy promptly and transparently.
