Florist Stepney Privacy Policy

Introduction

This Privacy Policy explains how Florist Stepney ("we", "us", "our") collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. The policy applies to all customers who place orders with Florist Stepney within Stepney and the surrounding districts.

The Data We Collect

When you place an order with Florist Stepney, we collect and process personal data necessary for fulfilling your order and providing excellent service. The types of information we collect include:

• Identity Data: Name (first and last name).
• Contact Data: Delivery address, phone number, and payment details (cardholder name, billing address, payment method, but not your full payment card details as payments are processed securely by our payment provider).
• Order Details: Order content (e.g., flower selection, messages for recipients), and any notes or instructions you provide.
• Correspondence: Communications from you such as emails or messages regarding orders or customer service.
• Technical Data: IP address, browser type, and device information if you use our website, collected via cookies and analytics tools for website security and performance.

Lawful Basis for Processing Your Data

Florist Stepney processes your personal data based on one or more of the following lawful bases as outlined by the GDPR:

• Contractual Necessity: To fulfil your order, process your payment, arrange delivery, and provide customer support services.
• Legal Obligation: To meet legal and regulatory requirements, such as accounting and tax records.
• Legitimate Interests: To improve our services, prevent fraud, ensure the security of our systems, and keep you informed of changes relating to your orders.
• Consent: When you provide specific consent, such as opting in to marketing communications (which you may withdraw at any time).

How We Use Your Data

We use your personal data to:

• Process, confirm, and deliver your order efficiently and in accordance with your instructions.
• Respond to your enquiries and provide customer support.
• Verify payment and prevent fraud.
• Comply with applicable laws and regulations.
• Send you service-related notifications, such as order confirmations and delivery updates.
• With your consent, send occasional promotional offers or newsletters relevant to our products and services.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above. Typically, we keep order and transaction records for up to six years to meet legal, tax, and accounting obligations. After this period, your identifiable information is securely deleted or anonymised unless a longer retention period is required by law or necessary for ongoing customer service issues.

Data Processors and Sharing

Florist Stepney works with trusted third-party service providers who may process your data on our behalf. Common examples include payment processors, delivery and logistics partners, IT support, and hosting services. Each processor is contractually obligated to handle your data securely and in compliance with GDPR. We do not sell or rent your personal data to third parties for their own marketing purposes.

Your data may be disclosed to legal or regulatory authorities only when required by law, or to enforce our contractual rights.

Your Rights

As a customer whose data is processed by Florist Stepney, you have the following rights under GDPR:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request us to correct inaccurate or incomplete data.
• Right to Erasure: You may request your data to be deleted when it is no longer required for the stated purposes, subject to legal requirements.
• Right to Restrict Processing: You may ask us to restrict the use of your information under certain conditions.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format that allows you to move it elsewhere.
• Right to Object: You may object to processing based on our legitimate interests or to direct marketing at any time.

If you wish to exercise any of these rights, please contact us using the contact options found on our website or place of business. We will respond to your request in accordance with legal requirements and within the recommended timeframes.

Data Security

We take your privacy seriously and use technical and organisational measures to safeguard your data, including secure servers, encrypted communications, and restricted access protocols. Nevertheless, please be aware that no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security of your data.

Cookies and Website Use

When you visit our website, we may use essential cookies to enable core site functionality. Where we use non-essential cookies (such as analytics cookies), we seek your consent in line with legal requirements. You may set your browser to refuse non-essential cookies, although this may impact site functionality.

Policy Updates

We may update this Privacy Policy from time to time in response to changes in legal, regulatory, or operational requirements. Updated versions will be posted on our website and will include the date of the latest revision. We encourage you to review this policy periodically.

Scope of this Policy

This Privacy Policy is intended for all customers placing Florist Stepney orders from Stepney and surrounding districts. By placing an order with us, you agree to the practices described in this policy.

Contact and Complaints

If you have questions about this Privacy Policy or our data handling practices, please use the contact details provided on our website or contact us at our business premises. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has not been handled lawfully.