Yeading Florist GDPR-Compliant Privacy Policy

Name: TRUE ROMANCE
Brand: Yeading Florist
Price: 110.00 GBP
Availability: InStock

Introduction

At Yeading Florist, safeguarding your personal data is at the heart of our business. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). The policy applies to all individuals placing orders with Yeading Florist within Yeading and the surrounding districts, whether orders are made online, by phone, or in person.

What Data We Collect

When you place an order with Yeading Florist, we may collect and process the following categories of personal data:

Contact Information: Your full name, delivery address, billing address, telephone number, and other relevant identification details.
Order Details: Information relating to your floral order, including delivery instructions, product selections, messages for greeting cards, and preferences.
Payment Information: Transaction details necessary to process your payment. (Note: Sensitive payment data, such as debit/credit card numbers, are processed securely by our payment provider and are not stored by us.)
Communications: Records of correspondence and any feedback you may provide to us.
Technical Data: Information on your use of our website, such as IP address, browser type, and device type, collected through analytics tools and cookies.

Lawful Basis for Processing Your Data

Your personal data is processed lawfully under the following grounds:

Contractual Necessity: We require your data to process, confirm, and fulfil your orders, and to provide customer service as part of our contract with you.
Legal Obligations: We may process your data to comply with statutory obligations, including tax and accounting requirements.
Legitimate Interests: We may use your information for reasons that are considered legitimate business interests, such as improving our services, fraud prevention, and ensuring network security, provided these do not infringe upon your rights.
Consent: Where required, such as for marketing communications, we will seek your consent and only send you information if you have agreed to receive it. You may withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

Processing and delivering your orders, including liaising with couriers and handling payments.
Communicating with you about your order status, answering queries, and providing customer support.
Managing your account with us, if you have chosen to create one.
Complying with regulatory, accounting, and legal requirements.
Improving our website, products, and customer experience through analytics and feedback.
Notifying you of any changes to our services or policies.

Data Retention

Yeading Florist retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, including for legal, accounting, or reporting requirements. The retention period depends on the nature of your interaction with us. Typically, order and transaction records will be retained for up to six years to comply with statutory obligations. After the relevant retention period has expired, your data will be securely deleted or anonymised.

Data Processors and Sharing

We may share your personal data, on a strict need-to-know basis, with trusted third parties who provide services essential to our operations. These include:

Payment Processors: To facilitate secure payment transactions.
Delivery Partners: To deliver your floral orders to the provided address.
IT and Hosting Providers: To support our website and electronic communications.
Professional Advisors: Including accountants and legal advisors, if required by law.

All data processors acting on our behalf are required to process your data in accordance with our instructions and data protection legislation. We do not sell or rent your personal data to any third party.

Your Rights

Under the GDPR, you have several rights regarding your personal data:

Right to Access: Obtain a copy of your personal data held by us.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data in certain circumstances ("right to be forgotten").
Right to Restriction of Processing: Ask that we restrict the processing of your personal data under certain conditions.
Right to Data Portability: Request transfer of your data to another provider, where technically feasible.
Right to Object: Object to certain processing activities, such as direct marketing.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
Right to Lodge a Complaint: You may complain to a supervisory authority if you believe we have not complied with data protection laws.

Security Measures

To protect your personal data, we implement appropriate technical and organisational measures designed to prevent unauthorised access, use, or disclosure. These include secure servers, encryption where applicable, regular security assessments, and restricted access controls.

Policy Updates

We may update this Privacy Policy occasionally to reflect changes to our practices or for legal, regulatory, or operational reasons. Any updates will be made available through our website. Please review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions regarding this Privacy Policy or how your personal data is handled at Yeading Florist, please contact us through the details provided on our website or by visiting our store in Yeading. We are committed to responding promptly to all queries and upholding your data protection rights.