Plumstead Florist Privacy Policy

Who This Privacy Policy Applies To

This privacy policy governs how Plumstead Florist collects, processes, and retains personal data for all customers placing orders with Plumstead Florist from Plumstead and the surrounding districts. We are dedicated to ensuring that your privacy is protected and that any personal data you share with us is kept secure and compliant with the General Data Protection Regulation (GDPR).

Personal Data We Collect

When you interact with Plumstead Florist, we may collect and process various forms of personal data necessary for fulfilling your order and providing our services. The types of information we may collect include:

• Contact Information: Name, address, phone number, delivery address, and any additional contact details you provide when placing an order.
• Order Details: Information relating to your florist order, such as product selection, card messages, delivery instructions, and any special requests.
• Payment Details: Payment information required to process your order. While card data is entered through secure payment processors, Plumstead Florist itself does not retain full card numbers or security codes.
• Communication Data: Information from your communication with us, including customer support queries, feedback, or complaints.
• Technical Data: When you use our website, we may collect technical data such as IP address, browser type, device type, and operating system for security and performance purposes.

Lawful Basis for Processing

Plumstead Florist processes your personal data under the following GDPR lawful bases:

• Contractual Necessity: We require specific data, such as your name, address, and payment details, in order to fulfil your order and deliver your purchase. Without this information, we cannot complete our agreement with you.
• Legal Obligations: We may be required to retain certain data to comply with financial and tax regulations relevant to our business.
• Legitimate Interests: We may process your data to improve our service, prevent fraud, respond to enquiries, and resolve disputes while ensuring these interests do not override your data rights.
• Consent: Where required, for instance to send marketing messages, we will always seek your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is used strictly to:

• Process and fulfil your orders
• Arrange delivery of floral products
• Respond to your queries or requests
• Manage accounts, invoices, and payments
• Comply with applicable laws and regulations
• Send service-related updates and, if opted in, promotional offers (you can opt out at any time)

Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. Typically, customer order information is retained for up to six years to comply with financial record keeping requirements. After this period, your data is securely deleted or anonymised unless a longer retention period is required or permitted by law. If you request the deletion of your data, we will assess whether we are able to comply, taking into consideration our legal obligations.

Data Processors and Sharing

Plumstead Florist may share your data with trusted third parties to provide our services. These data processors act on our behalf and only process data according to our instructions and in compliance with GDPR. Potential processors include:

• Payment processing partners for secure handling of card transactions
• Couriers and delivery partners responsible for delivering your floral order
• IT service providers hosting our website and managing order data

We require all such third parties to respect the security of your personal data and to treat it in accordance with the law. Your personal data is never sold to or shared with unrelated third parties for commercial purposes.

Your Privacy Rights

Under the GDPR, you have several rights regarding the personal data Plumstead Florist holds about you:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request corrections to any inaccurate or incomplete data.
• Erasure: Ask us to delete your personal information, subject to our legal obligations.
• Restriction: Ask us to restrict the processing of your personal information in certain circumstances.
• Objection: Object to us processing your data on grounds relating to your particular situation or for direct marketing purposes.
• Portability: Request the transfer of your data to you or to another service provider, where applicable.
• Withdraw Consent: Where we process your data based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided on our website. We will respond to your request within one month unless otherwise permitted by law, and may require verification of your identity to protect your privacy.

Data Security

We are committed to ensuring the security of your data. We have put in place appropriate technical and organisational measures to prevent unauthorised access, loss, misuse, or disclosure of your personal information. This includes secure storage of order information and use of encrypted connections when transmitting sensitive data such as payment details. Access to customer data is limited to authorised personnel and data processors who require access to provide our services.

Changes to This Privacy Policy

Plumstead Florist may update this privacy policy from time to time to reflect changes to our practices or for legal reasons. Updates will be published on our website and, where appropriate, notified to you via the contact information you have provided. We recommend reviewing this policy periodically to stay informed about how your personal data is protected.

Contact and Complaints

If you have any questions about this policy, your rights, or how we use your personal data, please see the contact details provided on our website. If you are unsatisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.