Florist Homerton Privacy Policy for Customers

Introduction and Scope

This Privacy Policy sets out how Florist Homerton (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information. We recognize the importance of safeguarding your personal data and are committed to processing it transparently and securely. This policy applies to all customers placing orders with Florist Homerton within Homerton and surrounding districts.

What Data We Collect

To fulfill and process customer orders, Florist Homerton may collect and process the following categories of personal data:

• Identity Data: Full name, delivery recipient’s name (if applicable).
• Contact Data: Delivery address, billing address, and contact details such as telephone number (if provided during ordering).
• Order Data: Details about products you order, delivery instructions, special requests, order history, and transaction details.
• Payment Data: Payment confirmation received from third-party payment providers (we do not store or process your full debit or credit card details ourselves).
• Technical Data: IP address, browser type, device type, and cookies for website performance and analytics (subject to user consent where required).
• Correspondence Data: Communications with customer support, feedback, or reviews linked to an identifiable individual.

Lawful Basis for Processing Personal Data

Under the General Data Protection Regulation (GDPR), we process your personal information based on the following lawful bases:

• Contractual Necessity: Most personal data is processed to fulfill your order and deliver products as requested. For example, your name, address, and order details are needed to process and deliver your order.
• Legal Obligation: Certain data may be retained or disclosed to comply with accounting, tax, or regulatory requirements.
• Legitimate Interests: We may use your information to improve our products and services, handle queries, ensure security, and prevent fraud, provided these interests do not override your rights and freedoms.
• Consent: For non-essential cookies, direct marketing, or optional promotional communications, we will only process your data with your explicit consent. You may withdraw your consent at any time.

How We Use Personal Data

We use the collected data only for the specified purposes, which include:

• Processing and fulfilling your flower orders and any associated delivery services.
• Handling payment confirmations.
• Managing customer service queries, complaints, or requests.
• Improving our website and services through aggregated analytics.
• Meeting legal or regulatory requirements.
• Sending you service-related messages (for example, order confirmations or delivery updates).
• With your consent, sending you promotional materials (you may opt out at any time).

Personal Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally:

• Order and transaction data are retained for up to six years to comply with tax and legal obligations.
• Communications and feedback are kept for up to two years after the last interaction unless required for ongoing claims or investigations.
• Marketing preferences will be kept until you indicate you no longer wish to receive communications from us.
• Cookie data may be retained for varying periods as indicated in our cookie policy.

Processors and Data Sharing

We may share your personal data with selected third-party service providers (“processors”) who help us provide our services. These may include:

• Payment providers who process your payments securely.
• Delivery and logistics companies who manage the physical delivery of your flowers.
• IT and website hosting services who manage our systems.
• Professional advisors (such as accountants or legal advisers) where necessary to comply with our legal obligations.

All processors are required to respect the security of your data and comply with legal requirements regarding personal data protection. We do not sell or rent your personal data to any third parties for commercial purposes.

Data Security

We put in place appropriate security measures to prevent accidental loss, unauthorized access, alteration, or disclosure of your personal information. Access to your data is restricted to employees, agents, contractors, and other third parties who have a lawful need to know.

User Rights Under GDPR

Under the GDPR, you have a number of important rights regarding your personal data. These include the right to:

• Request access to your personal data (commonly known as a ‘data subject access request’).
• Request correction or completion of your personal data if it is inaccurate or incomplete.
• Request erasure of your personal data where there is no compelling reason for its continued processing.
• Object to processing of your personal data, in particular where we rely on legitimate interests.
• Request restriction of processing in certain circumstances.
• Request the transfer of your personal data to another party (data portability).
• Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, you may contact us via our website or by using the contact methods provided with your order. We will respond to your requests in accordance with the GDPR’s requirements.

Children’s Privacy

Our services are not intended for use by children under the age of 16. We do not knowingly collect or process children’s data. If we become aware that personal information relating to a child has been collected, we will take appropriate steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. Any changes will become effective when published on our website. Please review this policy periodically for updates.

Contact and Queries

If you have questions or concerns about how your personal information is handled, or if you wish to exercise your data protection rights, please use the contact details provided in your order confirmation or on our website. We are committed to ensuring your privacy is protected at all times.