Upton Park Florist Customer Privacy Policy

Introduction

At Upton Park Florist, we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and protect customer information, in line with the General Data Protection Regulation (GDPR). This policy applies to all individuals placing flower orders with Upton Park Florist from Upton Park and the surrounding districts.

What Data We Collect

When you place an order or interact with Upton Park Florist, we may collect the following types of personal data:

  • Identity Data: Your name, title, and, if applicable, the recipient's name.
  • Contact Data: Delivery addresses, billing addresses, and contact details such as telephone numbers.
  • Transaction Data: Details about the products you have ordered, order dates, and payment details (excluding full card numbers, which are processed securely by payment providers).
  • Correspondence: Any data you provide when you contact us with a query, provide delivery instructions, or give feedback.
  • Technical Data: If using our website, information such as IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology used to access our site may be collected through cookies or analytics.

Lawful Basis for Processing

Upton Park Florist processes your personal data only when justified by one or more lawful bases under the GDPR:

  • Contractual Necessity: To process and deliver your floral orders, manage payments, and communicate with you regarding your purchase.
  • Legal Obligation: To meet our legal requirements for record keeping, tax, and other regulatory compliance.
  • Legitimate Interests: To improve our services, understand customer needs, handle customer service queries, and, where appropriate, keep you informed about relevant products or service updates (unless you opt out).
  • Consent: For specific activities such as sending you marketing materials, we rely on your explicit consent. You have the right to withdraw your consent at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

  • Processing and delivering your orders, including communicating with you about your purchase.
  • Managing payment and transactional information securely.
  • Responding to your customer service queries and feedback.
  • Maintaining accurate records for tax and legal purposes.
  • Improving our website, services, and understanding purchasing trends in Upton Park and surrounding districts.
  • Where agreed, sending occasional updates about our services, products, or offers (with your consent).

Data Retention

Upton Park Florist stores your personal data only as long as is necessary for the purposes set out in this policy, or as required by law. Typically, we retain transaction and customer data for up to seven years from the point of your last transaction, in order to comply with tax and reporting obligations. Data collected for marketing purposes based on your consent will be stored until you ask us to remove it, which you can do at any time.

Our Data Processors

To provide our services efficiently and securely, we may share certain data with carefully selected third-party service providers ('processors'). These may include:

  • Payment service providers for secure transaction processing.
  • Delivery companies or couriers to ensure prompt and accurate delivery of your orders.
  • IT and cloud solution providers for website hosting and data storage.
  • Professional advisers including accountants and legal advisers for compliance and business operations.

All processors are contractually obligated to handle your data in compliance with the GDPR and to maintain strict security standards. We do not sell or trade your personal data to third parties for marketing purposes.

User Rights

Under the GDPR, you have a range of rights regarding your personal data. At Upton Park Florist, we honour these rights and enable you to exercise them where relevant:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Ask us to correct or update inaccurate or incomplete personal data.
  • Erasure: Request deletion of your personal data, subject to legal obligations preventing immediate deletion (such as financial record-keeping).
  • Restriction: Ask us to restrict the processing of your personal data in certain circumstances.
  • Portability: Request to receive your data in a structured and commonly used electronic format, for transfer to another provider.
  • Objection: Object to processing your data for certain purposes, such as direct marketing.
  • Withdraw Consent: Where you've given consent to a data use, withdraw your consent at any time.

If you wish to exercise any of these rights or have concerns about how we handle your personal data, please contact us using the details on our website or at our physical store. We will respond to legitimate requests promptly and in accordance with legal timeframes.

Data Security

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All payment and transactional data is processed securely by accredited third-party providers, and all staff with access to customer data are trained in data protection obligations.

Policy Scope and Updates

This Privacy Policy applies to all Upton Park Florist customers placing orders from Upton Park and neighbouring districts, whether in-store, by phone, or online. We may update this policy from time to time to reflect changes in our practices, legal obligations, or improvements in our services. Any revised version will be published via our official channels and available upon request.

How to Contact Us

If you have questions regarding this Privacy Policy, wish to exercise your statutory rights, or require further information about our data protection practices, please speak to a member of our team at our store or reach us using the contact details provided on our website. We take privacy concerns seriously and will address your enquiry as quickly as possible.