Florist Beddington Order Privacy Policy

Scope and Commitment

This privacy policy explains how Florist Beddington collects, uses, stores, and protects your personal data when you place an order with us. The policy applies to all customers placing orders with Florist Beddington from Beddington and the surrounding districts. Florist Beddington is committed to ensuring your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and other relevant legislation. By placing an order or interacting with us, you acknowledge and agree to the practices described in this policy.

What Data We Collect

To provide our floral delivery and related services, Florist Beddington collects only the necessary personal information from customers. The data we collect may include:

• Identity Information: Name of the sender and, where required, the recipient.
• Contact Information: Address, delivery address, telephone number, and (where applicable) email address.
• Order Details: Products ordered, delivery date, personalised messages, special instructions, and transaction history with us.
• Payment Data: Payment method details. (Note: We do not store sensitive credit or debit card numbers as payment is processed securely by third-party processors.)
• Communication Data: Records of correspondence or complaints related to your order.

Lawful Basis for Processing

Florist Beddington processes your personal data under several legal bases as defined by the UK GDPR:

• Contractual Necessity: Processing your data is necessary to fulfil your order contract, including processing payments, delivering flowers, and handling customer service queries.
• Legal Obligations: We may process your data to comply with legal and regulatory requirements, such as tax or accounting rules.
• Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services, managing our operations, and responding to queries, provided these interests do not override your fundamental rights.
• Consent: In cases where we request your consent (for example, for marketing outside of transactional communications), we will ask for your clear permission and provide a straightforward way to withdraw consent at any time.

Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, including to fulfil any orders you place, comply with legal, tax, or accounting requirements, and resolve disputes. Typically, we retain customer order and communication records for up to 7 years from the date of your order to meet legal obligations and to assist with potential after-service enquiries. At the end of the retention period, your data will be securely disposed of or anonymised so it can no longer be linked to you.

Data Processors and Third Parties

Florist Beddington may share your personal data with trusted third-party service providers (data processors) where necessary to deliver our services or comply with the law. These may include:

• Payment processors for handling your transaction payments securely.
• Delivery and courier providers to deliver your products.
• IT and hosting service providers to support our website infrastructure.
• Professional advisers (such as accountants or legal advisers) if required under legal obligations.

These processors are only permitted to process your data on Florist Beddington’s instructions, for the purposes specified in this policy, and are required to maintain the security and confidentiality of your data.

Data Security

We implement a range of technical and organisational measures to safeguard your personal information. This includes access controls, data encryption where feasible, secure payment processors, and staff training. While every effort is made to keep your data secure, please be aware that no system is impenetrable and we recommend you also take care with your own account and personal details.

International Data Transfers

Your personal data will generally be stored and processed within the UK or European Economic Area (EEA). Should it ever be necessary to transfer your data outside of the UK or EEA (for example, if utilising an IT provider with overseas servers), we ensure such transfers are subject to appropriate safeguards in compliance with data protection laws.

Customer Rights Under GDPR

As a data subject under the UK GDPR, you have several rights with respect to your personal information. These include:

• Right of Access: You can request information about what data we hold about you, and receive a copy of your personal data.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information held about you.
• Right to Erasure: You can request that we delete your personal data under certain circumstances, for example, where the data is no longer needed for the original purpose.
• Right to Restrict Processing: You can ask us to temporarily halt processing while a complaint or correction is being processed, or if you contest the accuracy.
• Right to Object: You have the right to object to processing where we process data on the basis of legitimate interest or for direct marketing purposes.
• Right to Data Portability: You can, in certain circumstances, receive your data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, to make a complaint, or to request further information regarding the handling of your data, please contact us using our customer service channels. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.

Changes to This Policy

We may update this policy periodically to reflect changes in our practices, legal requirements, or for other operational reasons. We encourage you to review this policy occasionally to stay up to date about how we protect your personal data.

Contact and Further Information

If you have questions about this privacy policy or wish to exercise your rights, please contact Florist Beddington using the contact form provided on our website or the contact information given with your order confirmation. We are committed to responding to all legitimate requests and concerns as promptly as possible.