Florist Sydenham Privacy Policy

Introduction

This Privacy Policy explains how Florist Sydenham collects, uses, stores, and protects your personal information when you place orders with us from Sydenham and the surrounding districts. We are committed to safeguarding your personal data in accordance with the General Data Protection Regulation (GDPR). Our policy is designed to provide transparency about our data handling processes, your rights, and our obligations as a data controller and processor.

Scope of This Policy

This Privacy Policy applies to all customers who place orders for products or services from Florist Sydenham, whether online, by phone, or in person, within Sydenham and the neighboring communities. By using our services, you agree to the collection, processing, and storage of your information as described in this policy.

What Data We Collect

When you place an order or interact with us, Florist Sydenham may collect the following types of personal data:

• Contact Information: Such as your name, delivery address, billing address, and telephone number.
• Order Information: Details of your order including recipient name and address, preferred delivery time, and messages to recipients.
• Payment Data: Transaction details required for processing payments (processed through secure third-party payment platforms).
• Account Data: If you register with us, we may collect your login credentials and related profile information.
• Communication History: Records of your communications with our customer service team.
• Technical Data: IP address, browser type, and cookies (when using our website) to improve our service experience.

Lawful Basis for Data Processing

Florist Sydenham processes your personal data on the following lawful bases, as governed by the GDPR:

• Contractual Necessity: To fulfill your orders and manage your customer relationship with us, we require certain information, such as your name and delivery address.
• Legal Obligations: We retain data to comply with legal requirements, such as accounting and tax laws.
• Legitimate Interests: For purposes such as improving our services, responding to queries, or preventing fraud, provided that your rights and interests do not override these.
• Consent: We may use your data for marketing purposes only if you have given explicit consent, which you may withdraw at any time.

How We Use Your Personal Data

We use your information in the following ways:

• To process and deliver your orders, including communications with you about the status of your order.
• To process payments and issue receipts.
• For customer service, including support queries and delivery issues.
• To personalize your experience with us.
• To comply with legal and regulatory obligations.
• With your consent, to send you promotional communications about offers and news (you may opt out at any time).

Data Retention

We retain your personal data only for as long as necessary to provide our services, fulfill our legal obligations, and resolve any disputes. Typically, we keep your order and account data for up to seven years for accounting and tax purposes. After this period, your data will be securely deleted or anonymised, unless further retention is required by law or necessary for legal proceedings.

Data Processors and Third-Party Services

Florist Sydenham works with carefully selected third-party service providers ("processors") who support our business operations. These may include payment service providers, IT hosting companies, delivery partners, and customer service software platforms. All processors are contractually obligated to handle your data securely and only in accordance with our instructions and the requirements of GDPR. We do not sell or share your data with any third parties for their own marketing purposes.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal information against loss, misuse, or unauthorized access. Measures include secure servers, encrypted payment processing, and restricted access to personal data. We regularly review and update our security practices.

Your Rights Under GDPR

As a data subject, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data when it is no longer necessary, or if you withdraw consent (subject to our legal obligations).
• Right to Restrict Processing: Ask us to limit the processing of your data in certain circumstances.
• Right to Data Portability: Request a copy of your data in a machine-readable format for transfer to another provider.
• Right to Object: Object to the processing of your data where we are relying on legitimate interests or sending you direct marketing communications.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

If you wish to exercise any of these rights or have questions about your data, please contact us via the customer service details provided on our website or in your order confirmation.

Changes to This Privacy Policy

Florist Sydenham may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We encourage you to review this policy periodically. If we make significant changes, we will notify you through our website or by other appropriate means.

Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing activities, please get in touch using the contact information published on our website. You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been violated. We are committed to responding promptly and transparently to resolve any issues.