Beckenham Florist Privacy Policy

Introduction

This Privacy Policy explains how Beckenham Florist ("we", "us") collects, processes, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all individuals who place orders with Beckenham Florist within Beckenham and the surrounding districts. We are committed to safeguarding your privacy and handling your personal data transparently.

Personal Data We Collect

Beckenham Florist collects only the data necessary to process your orders and provide you with our floristry services. The data we may collect includes:

• Identity Data: Name and, if relevant, the name of the recipient.
• Contact Data: Delivery address, billing address, telephone number, and order recipient's contact information as necessary.
• Order Data: Details about the products you purchase, messages attached to arrangements, and special instructions.
• Payment Data: Payment transaction details (note: payment information is processed securely, and we do not store full card details).
• Technical Data: IP address, device type, and browser information, where applicable, to improve our website and order functionality.

We do not knowingly collect or process special categories of personal data (such as health, ethnicity, or religious beliefs) for standard orders.

Lawful Basis for Processing Data

Under GDPR, all organisations must have a lawful basis for processing personal data. Beckenham Florist relies on the following lawful bases:

• Contractual Necessity: Most of the data we process is required to fulfil your contract with us. For example, we need your contact and delivery details to arrange delivery of your flowers.
• Legal Obligation: We may need to retain certain data for tax, accounting, and regulatory compliance.
• Legitimate Interests: We may process minimal data to improve our services, handle queries, or inform you of crucial service updates. Where we rely on this basis, we ensure our interests are balanced with your rights and expectations.
• Consent: Where required, such as for marketing communications, we will seek your consent. You can withdraw this consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and completing your orders, including delivering floral arrangements to you or your chosen recipient.
• Communicating with you about your order, including confirmations, queries, or delivery updates.
• Managing payments and fraud detection.
• Improving our website, products, and services based on usage data and customer feedback.
• Complying with legal and regulatory requirements.

Who Processes Your Data

Beckenham Florist restricts access to your personal data to staff members who need it for processing your orders. In certain circumstances, we use third-party service providers as data processors. These processors include:

• Payment Service Providers: To securely process transactions made via debit/credit cards or other payment methods. These providers process your data only as necessary to complete your payment; we do not store full card details ourselves.
• Delivery Partners: On occasion, trusted delivery partners may require access to delivery details in order to facilitate your order.
• IT Service Providers: If you place orders through our website, technical providers may access limited data solely for technical support or maintenance purposes.

All processors are contractually bound to process your data under our instructions, in compliance with GDPR, and are not permitted to use your data for any other purpose.

How We Store and Protect Your Data

We take appropriate technical and organisational measures to secure your personal data. This includes ensuring that digital data is password-protected and securely stored, while any paper records are suitably safeguarded. Access to your data is restricted to authorised personnel only. Where third-party processors are used, we ensure adequate security and GDPR-compliance checks are in place.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, customer order data is retained for up to 7 years to meet accounting and audit obligations. In cases where data is no longer required, we will securely delete or anonymise it.

Your Rights Under GDPR

You have several rights under GDPR in relation to your personal data. These include:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to inaccuracies in your data.
• Right to Erasure: Under certain circumstances, such as when data is no longer necessary, you can request deletion.
• Right to Restrict Processing: You can ask us to suspend processing your data under certain conditions.
• Right to Data Portability: You can request that we transfer your data to another provider where technically feasible.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

Children's Privacy

Beckenham Florist services are not intended for children under the age of 16. We do not knowingly collect data from anyone under this age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can address the situation promptly.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or other operational reasons. Any changes will be posted on our website, and important updates may be communicated directly to customers where appropriate. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contacting Us

If you have any questions about how Beckenham Florist collects or processes your data, or if you wish to exercise your data protection rights, you may contact us using the details provided on our website or by writing to our shop address. We are committed to responding to data protection queries within the timeframes required by law.