Privacy Policy for Flower Orders – Beddington Florist

Introduction

This Privacy Policy explains how Beddington Florist collects, uses, stores, and protects personal information received from customers placing flower order requests in Beddington and the surrounding districts. We are committed to processing your information in accordance with the General Data Protection Regulation (GDPR) and ensuring your rights are respected. This policy applies to all individuals who order from us, whether online, via telephone, or in person.

What Data We Collect

In order to fulfil your flower orders and provide our services effectively, we collect the following types of personal data:

  • Contact Information: Name, delivery address, billing address, and telephone number.
  • Order Details: Purchase history, recipient name and address, delivery instructions, and messages for inclusion with gifts.
  • Payment Information: Payment method details (such as last 4 digits of card or confirmation of payment). Note: We do not store full payment card details; processing is handled securely by our payment processor.
  • Communication Records: Customer service messages, instructions, and correspondence related to orders.
  • Technical Information: IP address, device type, browser information, and usage data if you place an order online.

Lawful Basis for Processing

Under the GDPR, we are required to identify lawful grounds for processing your personal data. The legal bases on which we process your information include:

  • Contractual Necessity: Collecting and processing your personal data is essential to completing your order and fulfilling our contractual obligations to you.
  • Legal Obligation: We may be required to retain certain information for accounting, tax, and other legal compliance purposes.
  • Legitimate Interests: We may process your data to improve our services, handle customer queries, and conduct limited marketing to customers (where permitted and not overridden by your rights).
  • Consent: Where consent is needed (for example, for certain marketing communications), we will obtain it clearly and separately.

How We Use Your Personal Data

Your personal data is used for the primary purpose of fulfilling and delivering your flower orders. Specifically, we may use it to:

  • Process your purchase and arrange delivery of flowers and gifts.
  • Contact you about your order or respond to your enquiries.
  • Manage payment transactions securely through third-party processors.
  • Keep internal records for invoicing, audit, and tax compliance.
  • Send relevant information about your order or updates about our products and services (only where you have indicated your preference to receive such communications).
  • Monitor, evaluate, and improve our website and customer service experience.

Data Retention

We retain your personal information only for as long as it is necessary to fulfil the purposes outlined in this policy, including for legal, accounting, or reporting requirements. Typically, customer order information is kept for up to six years (in line with accounting regulations). Shorter retention periods may apply for data processed solely for communication or marketing purposes. Once your data is no longer required, we will ensure that it is securely deleted or anonymised.

Processors and Data Sharing

Beddington Florist sometimes engages trusted service providers (data processors) to support the delivery of our services. Examples include payment processing companies, delivery couriers, and IT service providers. Where we do so, these third parties are contractually bound to protect your data, process it only on our instructions, and maintain its confidentiality and security. Your data is not sold, rented, or shared with external parties for unrelated purposes. Data transfers are limited to what is necessary for fulfilling orders and complying with legal obligations.

User Rights Under GDPR

You have several rights regarding your personal data under GDPR:

  • Right of Access: You have the right to request access to the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete information.
  • Right to Erasure: In some cases, you have the right to have your personal data deleted.
  • Right to Restrict Processing: You can request that we limit how your data is processed in certain circumstances.
  • Right to Data Portability: You can ask to receive your data or for us to transfer it to another provider where technically feasible.
  • Right to Object: You may object to the processing of your data for direct marketing or in certain other situations.
  • The right to Withdraw Consent: Where consent is the lawful basis for processing, you may withdraw it at any time.
  • Right to Lodge a Complaint: You have a right to complain to the relevant data protection authority if you are concerned about how your data is handled.

If you wish to exercise any of these rights, please contact us using the details provided on our official website or at our physical store premises.

How We Protect Your Information

Beddington Florist takes data security seriously and implements appropriate physical, technical, and organisational safeguards to protect your information from loss, misuse, unauthorised access, or disclosure. These measures include secure payment gateways, encrypted communications where possible, staff training, and regular reviews of our data protection practices.

Policy Scope and Changes

This Privacy Policy applies exclusively to customers placing Beddington Florist orders from Beddington and the surrounding districts. We may update this policy periodically to reflect changes in our practices or legal obligations. We encourage you to review this document when ordering from us to ensure you are aware of how your data is being used and protected.

Contact Information

If you have any questions about this Privacy Policy, the handling of your personal information, or wish to exercise your rights, please contact us through the details provided on our website or by visiting our store. We take all privacy requests seriously and aim to respond promptly.