Florist Shoreditch GDPR Privacy Policy

Introduction

Florist Shoreditch values the trust of our customers and is committed to maintaining the privacy and protection of personal data. This GDPR-compliant Privacy Policy explains how we collect, use, retain, share, and protect your personal information when you place an order with Florist Shoreditch, whether you are located in Shoreditch or the surrounding districts. It also outlines your rights under the General Data Protection Regulation (GDPR).

Scope of This Policy

This Privacy Policy applies to all individuals who place orders with Florist Shoreditch from Shoreditch and surrounding districts. By ordering from our company, you acknowledge your understanding and acceptance of the practices described herein.

Personal Data We Collect

Florist Shoreditch collects and processes different types of personal data to provide our services effectively. The types of data collected may include:

• Contact Information: such as name, delivery address, billing address, and telephone numbers provided by you while placing an order.
• Order Details: including order contents, recipient information, delivery instructions, and notes attached to your order.
• Payment Information: basic transaction information (such as payment method) is processed securely through our payment processors; we do not store your full payment card details on our systems.
• Communication History: any correspondence or feedback you send us related to your orders or customer service requests.
• Technical Data: including IP address, browser type, device type, time and date of visit, and cookies as necessary for website functionality and security.

Lawful Basis for Data Processing

Under the GDPR, we are required to have a lawful basis for processing your personal data. Florist Shoreditch relies on the following lawful bases:

• Contractual Necessity: Most of the personal data we process is necessary to perform and fulfill your purchase contract (to process and deliver your order).
• Legal Obligation: We may process certain information when required to comply with law (such as tax or accounting obligations).
• Legitimate Interests: We may process your data for legitimate business interests, such as ensuring the security of our website and improving our services. When relying on this basis, we carefully balance our interests with your data protection rights.
• Consent: Where legally required, we will ask for your consent, for example, where you subscribe to optional marketing communications. You can withdraw your consent at any time.

Data Retention

Florist Shoreditch retains your personal data only as long as necessary for the purposes described in this policy.

• Order Information: Retained for up to 7 years from the date of your last order, to comply with legal, accounting, and dispute resolution requirements.
• Contact and Communication Data: Retained for up to 2 years following your last interaction with us, unless a longer retention period is necessary for legal reasons.
• Marketing Preferences: If you have provided consent for marketing, we will retain your data until you withdraw that consent.

Once the relevant retention period expires, data is deleted or securely anonymised.

Data Processors and Sharing

Florist Shoreditch works with selected third parties (data processors) to deliver our services. These processors help with:

• Payment processing
• Order fulfillment (such as couriers or delivery partners)
• Website hosting and IT infrastructure
• Customer support tools
• Analytics providers for website usage monitoring

We ensure all processors adhere to strict data protection requirements as required under GDPR, and we only share data necessary for the functions they perform. We do not sell your personal data to third parties for marketing purposes.

Your Rights as a Data Subject

If you are located in Shoreditch or the surrounding districts and place an order with us, you have the following rights under GDPR:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any incorrect or incomplete information.
• Right to Erasure: You can request deletion of your personal data where it is no longer necessary or if consent is withdrawn (except where required to retain it by law).
• Right to Restrict Processing: You can ask us to limit the processing of your data in certain circumstances.
• Right to Data Portability: You can ask to receive your data in a structured, commonly-used, machine-readable format and request that we transfer it to another controller, where applicable.
• Right to Object: You may object to certain types of personal data processing, including for direct marketing purposes.
• Right to Withdraw Consent: Where we process your data based on consent, you have the right to withdraw your consent at any time.

To exercise any of your rights, please contact Florist Shoreditch using our usual contact methods. We may need to verify your identity before fulfilling your request and will respond within the timeframe established by GDPR.

Data Security

Florist Shoreditch uses a variety of technical and organizational measures to protect your information from unauthorized access, misuse, alteration, or loss. This includes secure payment processing, encryption tools, and restricted data access, ensuring a high level of data protection throughout your order experience.

International Data Transfers

We store data on servers located within the United Kingdom or the European Economic Area (EEA), where possible. If we must transfer data to processors outside the EEA, we ensure such transfers are made in compliance with applicable data protection laws and subject to appropriate safeguards.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our data processing practices or legal obligations. The latest version will always be available on our website, and any significant changes will be clearly indicated.

Contact and Complaints

If you have questions about this policy or are unsatisfied with the way Florist Shoreditch handles your data, you may contact us via our usual customer service channels. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.