Privacy Policy for Florist Ickenham Customers

Introduction

This Privacy Policy describes how Florist Ickenham collects, uses, shares, and retains your personal information, and outlines your rights under the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Ickenham from Ickenham and the surrounding districts.

What Data We Collect

When you interact with Florist Ickenham, we may collect the following types of personal data:

  • Contact Information: such as your name, delivery and billing addresses, and telephone number.
  • Order Details: including product selections, delivery instructions, card messages, and any additional comments you provide.
  • Payment Information: such as limited card or bank details, when provided during payment (note that payment details are generally processed via secure third-party payment processors).
  • Account Information: if you register for an account, we collect your username and password.
  • Communication History: such as records of inquiries, feedback, or complaints received by email, phone, or post.
  • Technical Information: including IP address, device details, and cookies where applicable to enable website functionality and improve your experience.

Lawful Basis for Processing Personal Data

Florist Ickenham processes your personal data in compliance with GDPR, using only the following lawful bases:

  • Contractual Necessity: Processing your data is required to fulfil your order or to take steps at your request prior to entering into a contract (e.g., to arrange delivery or process payments).
  • Legal Obligation: We may process your information to comply with the law, such as for recordkeeping or tax requirements.
  • Legitimate Interests: Certain processing is necessary for our legitimate business activities, such as communicating with you about your order, improving our services, and ensuring security. Where we rely on legitimate interests, we ensure your rights and interests are considered and protected.
  • Consent: We may seek your explicit consent for specific processing, such as marketing communications. You have the right to withdraw this consent at any time.

How We Use Your Personal Data

Your personal information is used for the following purposes:

  • Processing and completing your orders;
  • Arranging payment and delivery;
  • Responding to your queries and requests;
  • Managing your online account (if applicable);
  • Sending you important order or service-related communications;
  • Enhancing and personalising your customer experience;
  • Carrying out analytics and improvements to our service and website;
  • Fulfilling any legal or regulatory obligations.

How Long We Retain Your Data

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, accounting, or reporting requirements. Typically:

  • Order records and transaction details are kept for up to seven years for accounting and legal purposes.
  • Account-related data is kept for as long as your account remains active and a reasonable period thereafter in case of queries or disputes.
  • Marketing data is maintained until you opt out or withdraw your consent.

Once data is no longer required, it is securely deleted or anonymised.

Data Processors and Third Parties

To operate efficiently, we may share your data with trusted third-party processors for activities such as:

  • Payment processing;
  • Delivery services and couriers;
  • Website hosting and technical support;
  • Customer relationship management tools.

All processors act on Florist Ickenham’s behalf and only process your data as instructed, in accordance with GDPR. Contracts are in place requiring them to keep your data secure and confidential, and to not use it for their own purposes.

Your Rights Under GDPR

As a customer of Florist Ickenham, you have rights regarding your personal data:

  • Right to Access: You can request a copy of your personal data held by us.
  • Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected.
  • Right to Erasure: In some circumstances, you can request the deletion of your personal data.
  • Right to Restrict Processing: You can request that we temporarily suspend processing of your data under certain conditions.
  • Right to Data Portability: Where we process your data based on your consent or a contract, you may request a copy in a commonly used and machine-readable format.
  • Right to Object: You may object to the processing of your data for direct marketing or where our lawful basis is legitimate interests.
  • Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.

To exercise these rights, please contact us using the details provided on our website. We will respond to all legitimate requests within one calendar month. We may need to verify your identity to ensure your data is protected.

Security of Your Information

Florist Ickenham takes the security of your data seriously. We implement appropriate physical, technical, and organizational measures to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. While we strive to ensure the security of your data, no internet transmission can be guaranteed as fully secure. We recommend you keep your own passwords confidential and notify us immediately if you suspect any unauthorized access to your account.

Changes to This Policy

This privacy policy may be updated from time to time. The latest version will always be available on our website. We encourage you to review this policy regularly to stay informed of our data practices.

Contacting Florist Ickenham

If you have any questions about this policy or wish to exercise your rights, please use the contact details provided on our official website. We are committed to resolving any concerns promptly and transparently.