Battersea Florist Privacy Policy

Introduction

This Privacy Policy explains how Battersea Florist collects, uses, stores, and protects your personal data when you place orders with us in Battersea and the surrounding districts. Your privacy is very important to us, and we are committed to complying with the General Data Protection Regulation (GDPR) to ensure your information remains secure and your rights are respected.

Who This Policy Applies To

This Privacy Policy applies to all customers placing orders with Battersea Florist from Battersea and neighbouring areas. By using our services, you acknowledge that you have read and understood this policy, and you consent to the practices described in it.

What Data We Collect

To fulfill your orders and to provide you with the best possible service, we collect the following types of personal data:

• Identity Information: Name and contact details such as delivery address, billing address, phone number (optional), and payment confirmation details.
• Order Details: Products ordered, order history, delivery instructions, and any messages or notes included with your order.
• Transaction Data: Details of payment transactions (we do not store your full financial information—only confirmation or reference of payment).
• Correspondence: Any communications between you and Battersea Florist, including feedback, complaints, and queries.
• Technical Data: Your interaction with our website, including device and browser type, IP address, and cookies (where applicable and consented to).

The Purpose and Lawful Basis for Processing Your Data

Under the GDPR, the lawful bases we rely on for processing your personal data are:

• Contractual Necessity: Most of your data is processed to fulfill our contract with you—to deliver your orders, manage payments, and process customer requests.
• Legal Obligation: We retain certain data to comply with legal and regulatory requirements, such as tax and accounting records.
• Legitimate Interests: We may process your data to improve our services, prevent fraud, or communicate about similar products and offers (unless you opt out). This processing does not override your interests or fundamental rights.
• Consent: Where you have provided explicit consent (e.g., for receiving newsletters or for the use of cookies), we process your data accordingly. You may withdraw your consent at any time.

Who Processes Your Data

Your information is handled by authorised staff at Battersea Florist for order fulfillment, customer support, and financial reconciliation. We may also use trusted third-party service providers (data processors) who assist us in operating our business. These may include:

• Payment processors for secure transactions (we do not store your payment card details).
• Courier or delivery services for order fulfillment.
• IT service providers who help manage our website and data security.
• Accountants or auditors who require access for legal or regulatory purposes.

All data processors are selected carefully to ensure they meet high standards of data protection and act only under our instructions. They are contractually obliged to follow GDPR requirements and may not use your data for their own purposes.

How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes it was collected for:

• Order and transaction records are kept for up to 7 years, in line with tax and accounting obligations.
• Customer correspondence and feedback are stored for up to 2 years for quality and support purposes.
• Technical cookies and analytics data are retained as specified in our cookie notice or until you withdraw consent.
• If you request erasure of your data (where applicable), we review your request and comply unless retention is required for legal reasons.

How We Protect Your Data

We take all reasonable technical and organisational measures to safeguard your data against accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes the use of encrypted systems, secure payment processing, regular security reviews, and staff training on data protection best practices.

Your Data Protection Rights

As a customer in Battersea and surrounding districts, your rights under the GDPR include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You can request the deletion of your data in certain circumstances.
• Right to Restrict Processing: You may ask us to restrict how we use your information in specific circumstances.
• Right to Data Portability: You can request that we transfer your data to another provider, where technically feasible.
• Right to Object: You have the right to object to certain processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.
• Right to Complain: If you have concerns about the use of your data, you can lodge a complaint with the appropriate supervisory authority.

Policy Updates

We may update this Privacy Policy from time to time to ensure continued compliance with GDPR and to reflect changes in our practices. The updated policy will be posted on our website and is effective immediately on publication.

Contact and Further Information

If you have any questions about this Privacy Policy or wish to exercise any of your rights concerning your personal data, please contact us using the details provided on our website. We are committed to responding to your queries promptly and effectively.