Florist Elm Park Privacy Policy
Introduction
This Privacy Policy explains how Florist Elm Park collects, processes, stores, and protects your personal data when you place orders from Elm Park or any of the surrounding districts. We are committed to safeguarding your privacy and ensuring that your information is handled securely and in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers who make purchases, bookings, or inquiries through our services.
What Data We Collect
When you interact with Florist Elm Park, we may collect the following categories of personal data:
- Identity Data: Your full name, and where relevant, the name of the intended recipient.
- Contact Data: Delivery address, billing address, and location details relevant for delivery, as well as any phone number provided for contact regarding orders.
- Order Details: Information about the products you purchase, delivery preferences, and any customer instructions you provide to us.
- Payment Data: Details related to your payment method (e.g. payment card type and transaction details). Please note, we do not store your complete payment card details—these are handled by approved and secure payment processors.
- Communication Data: Details of your communications with us, such as telephone or written correspondence relating to your order or our services.
- Technical Data: If you visit our website, limited technical data such as IP address, browser type, and usage logs may be collected for analytics and performance enhancement.
Lawful Basis for Data Processing
We process your personal data based on the various lawful bases defined under the GDPR:
- Contract Performance: Most of the processing we carry out is necessary for the performance of the contract with you, for example, to fulfill your order, process payments, or arrange deliveries.
- Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services, dealing with queries or complaints, or sending you communications about similar products that may interest you—you have the right to opt out of such communications at any time.
- Legal Obligations: We process some data to comply with our legal obligations, such as maintaining records for accounting or tax purposes.
- Consent: Where your consent is required, for example, for non-essential cookies or marketing communications, you are free to withdraw that consent at any time.
How We Use Your Data
Your personal data is processed only for the specified purposes for which it was collected, including:
- To process and fulfil your floral product orders and deliveries.
- To communicate with you about your order status, address special instructions, or clarify information.
- To manage payment transactions securely through trusted payment processors.
- To respond to any inquiries, requests, or feedback you provide.
- To meet statutory recordkeeping and accounting requirements.
- To improve our website, products, and customer experience, with the use of analytics where applicable.
Retention of Personal Data
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Generally, we will keep your order and contact data for up to 6 years in line with our statutory obligations for accounting and tax purposes. Communication data relating to customer service queries will typically be retained for up to 2 years, unless there is an ongoing issue that requires a longer retention period.
If you have consented to marketing communications, your contact details will be retained until you withdraw your consent or unsubscribe.
Processors and Third Parties
To conduct our business and provide you with the best possible service, we may engage third-party service providers (“processors”) to process certain data on our behalf. These may include:
- Payment processing providers to securely process purchase transactions.
- Delivery and courier partners for fulfilment of your orders.
- IT and website hosting services ensuring the security and operation of our online platforms.
- Professional advisors (such as accountants or auditors), where necessary for legal compliance.
All our processors are contractually bound to protect your data and may only process your information for specified purposes and in accordance with our written instructions. We do not sell, rent, or trade your personal data with any third parties for marketing purposes.
Your Rights
Under the UK GDPR you have several rights regarding your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You can request corrections to any inaccurate or incomplete data.
- Right to Erasure: In certain circumstances, you can ask us to delete your personal data.
- Right to Restrict Processing: You can ask us to limit how your data is processed in certain situations.
- Right to Data Portability: Where applicable, you can request that we transfer your data to another provider.
- Right to Object: You can object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where data is processed on the basis of consent, you may withdraw this at any time.
To exercise any of these rights, please contact us in writing. We may need to verify your identity before fulfilling your request. We aim to respond to all requests within one month and with no charge, unless the request is unfounded or excessive.
Data Security
We take data security seriously and have implemented appropriate physical, technical, and organisational measures to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.
Access to your personal data is restricted to employees and authorised service providers who need it to process your order or provide you with support.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our data processing activities or legal requirements. When we do, the latest version will be made available to all customers. We encourage you to review this policy occasionally for changes.
Contact and Further Information
If you have any questions or concerns about this Privacy Policy, how your data is handled, or you wish to exercise your data protection rights, please contact us using the details provided on our website or in our ordering correspondence.
This Privacy Policy was last updated in June 2024. It is intended for all customers placing orders with Florist Elm Park in Elm Park and surrounding districts.