How Florist Norbury Handles Your Personal Information

Florist Norbury Privacy Policy

Introduction

This Privacy Policy explains how Florist Norbury collects, uses, stores, and protects your personal information when you place an order with us. It applies to all customers ordering from Florist Norbury within Norbury and the surrounding districts. Protecting your privacy is important to us, and we follow the requirements of the General Data Protection Regulation (GDPR).

What Data We Collect

To provide our floristry services and ensure successful delivery of your orders, we collect the following types of information:

Personal Identification Data: Name, address (for delivery and billing), postal code, and telephone number.
Order Information: Details of your floral orders, delivery instructions, and messages for recipients.
Payment Information: Payment method details (note: payment information is processed securely by third-party payment providers; we do not store your full card details).
Communication Data: Correspondence with us, including questions, feedback, or complaints that you submit via our website or by other means.
Website Usage Data: Information about your use of our website, such as IP address, browser type, pages visited, and visit duration. This may be collected via cookies or similar technologies, where appropriate and subject to your consent as required.

Lawful Basis for Processing Your Data

We process your personal data in compliance with the lawful bases as outlined by the GDPR. Our primary lawful grounds are:

Contractual Necessity: Processing your data is necessary to fulfil our contract with you when you place and manage an order with us, including making deliveries and processing payments.
Legal Obligation: We may process certain information to comply with legal and regulatory obligations, such as accounting and tax requirements.
Legitimate Interests: Where appropriate, we may process your data to improve our services, enhance the security of our website, and respond to your inquiries. We always consider your rights and interests.
Consent: In situations where required (such as for direct marketing or the use of certain cookies), we will only process your data if you have given explicit consent. You may withdraw your consent at any time.

How We Use Your Data

Your data may be used for the following purposes:

To process and deliver your floral orders as instructed.
To manage payments and prevent fraud.
To communicate with you regarding your order, including confirmation, updates, and delivery issues.
To respond to inquiries, feedback, or complaints submitted by you.
To improve our website, services, and customer experience (for example, by analysing website usage).
To comply with legal and regulatory obligations.
To send you marketing communications, if and only if you have opted in to receive them. You can opt out at any time.

Data Retention: How Long We Keep Your Data

Florist Norbury retains your personal data only as long as is necessary for the purposes for which it was collected, or as required by law. In general:

Order and delivery information is kept for up to seven years to ensure customer service continuity, process refunds or queries, and meet tax and legal requirements.
Financial transaction records are maintained for the statutory retention period required by UK law.
Website usage data collected for analytics may be retained for up to two years, after which it is deleted or anonymised.
Where personal data is processed based solely on consent, it will be deleted upon withdrawal of that consent.

Sharing Your Information: Processors and Third Parties

We do not sell or trade your personal information. However, to provide our services, we may share certain data with trusted third-party processors, including:

Payment Processors: Secure payment service providers that handle card transactions.
Delivery Partners: Couriers who require recipient and address details to complete deliveries.
IT and Website Support Providers: Technical partners who assist in maintaining our website and customer databases.
Professional Advisors: Accountants, auditors, or legal advisors who may access certain information when performing their roles.

All such third parties are required to process your data only according to our instructions and with appropriate safeguards in place. If any third party is based outside the UK or EEA, we ensure that adequate protection for your data is maintained according to GDPR standards.

Your GDPR Rights

As a customer of Florist Norbury, you have the following rights in relation to your personal information:

Right of Access: You can request confirmation of what personal data we hold about you and receive a copy of it.
Right to Rectification: You may ask us to correct inaccuracies or update incomplete data.
Right to Erasure: In certain circumstances, you can request the deletion of your information from our records.
Right to Restrict Processing: You can ask us to restrict how we use your data in specific situations.
Right to Data Portability: Where applicable, you may request your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your data on grounds relating to your particular situation, especially in the case of direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.
Right to Lodge a Complaint: You have the right to complain to the relevant data protection authority if you believe your data has not been handled in accordance with the law.

To exercise any of these rights, or to request more information, you can contact us using the contact facilities provided on our website or through the usual Florist Norbury customer service channels.

How We Protect Your Data

Florist Norbury implements appropriate technical and organisational measures to safeguard your personal data. These include secure storage systems, encryption of payment information, and regular assessments of our processes and third-party providers. Access to your data is given only to those employees or contractors who need it to perform their duties, always under strict confidentiality obligations.

Updates to This Policy

We may occasionally update this Privacy Policy to reflect changes in our practices, new legal requirements, or for other operational reasons. Updated policies will be posted on our website and apply from the date of publication. We encourage you to review this Policy regularly to stay informed about how we protect your information.

Contacting Us

If you have any questions about this Privacy Policy or your data rights, please contact us through the relevant contact form or customer service channels provided by Florist Norbury. We are committed to protecting your privacy and ensuring your data is handled lawfully and fairly.