Lewisham Florist Privacy Policy

Introduction

At Lewisham Florist, we take your privacy and data protection seriously. This Privacy Policy outlines how we collect, use, store, and protect your personal information in line with the General Data Protection Regulation (GDPR) and other applicable laws. This policy applies to all customers placing Lewisham Florist orders from Lewisham and the surrounding districts. By engaging our services, you acknowledge and agree to the collection and use of your personal data as set out in this policy.

What Personal Data We Collect

To fulfil your order and provide our services efficiently, Lewisham Florist may collect the following information:

• Identification Information: Name, delivery address, and billing address.
• Contact Information: Phone number and (if supplied) email address.
• Order Information: Details of the products and services you order, recipient information, preferred delivery date, and personalised message instructions.
• Payment Information: Payment card details (processed securely by third party providers; Lewisham Florist does not store full card numbers).
• Technical Data: IP address and basic device details for security and site performance monitoring.

We do not intentionally collect sensitive personal data unless required for the specific delivery or by law, and will notify you if such collection becomes necessary.

Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so. The primary lawful bases for processing your information include:

• Contractual Necessity: To process and deliver your order, including confirming details and handling payment transactions.
• Legitimate Interests: For legitimate business reasons, like improving our services, ensuring website security, and preventing fraud.
• Legal Obligation: Where we are required to keep records for tax or legal purposes.
• Consent: Where you have provided active consent, for example, to receive marketing communications (which you may opt out of at any time).

How We Use Your Data

Your personal data is used for the following purposes:

• To process, confirm, and fulfil your orders.
• To contact you regarding order queries or delivery status.
• To improve the quality and security of our services.
• To manage and respond to customer service inquiries or complaints.
• To meet our legal, regulatory, and accounting obligations.
• To send marketing material with your explicit consent (which can be withdrawn at any time).

Retention of Your Data

We retain your personal data only as long as necessary to fulfill the purposes outlined above and to comply with legal, regulatory, and financial record-keeping requirements. Generally, we keep order and contact information for up to six years after your order to comply with accounting regulations and manage potential claims. Data used for marketing purposes will be retained only as long as you consent to receiving communications.

After the retention period expires, we ensure your personal data is securely deleted or anonymised.

Data Processors and Sharing

To deliver our services, Lewisham Florist may share your data with trusted third-party service providers (data processors), strictly for the purposes required to fulfil your order. These include:

• Payment Providers: For secure processing of card transactions.
• Delivery Partners: For local and district deliveries to ensure your flowers arrive safely and on time.
• IT and Web Hosting Partners: To provide secure hosting and maintain the functionality of our online services.
• Professional Advisors: For legal or accountancy advice, where obligated.

All our third-party processors are required to adhere to GDPR standards and only process your data on our instructions. We do not sell or otherwise share your information with unrelated third parties for their own marketing.

Your Rights Under GDPR

As a data subject within the scope of GDPR, you are entitled to several rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct or update any inaccurate or incomplete data we have about you.
• Right to Erasure: Request deletion of your personal data when there is no compelling reason for continued processing.
• Right to Restriction: Request us to limit the processing of your data.
• Right to Data Portability: Receive your data in a structured, commonly used machine-readable format and have it transmitted to another controller.
• Right to Object: Object to processing where we are relying on legitimate interests, including for marketing purposes.
• Right to Withdraw Consent: If processing is based on your consent, you can withdraw your consent at any time.

If you wish to exercise these rights, please contact us using the details provided on our website. We may need to verify your identity before processing your request and will respond within one month. If you believe your privacy concerns have not been resolved, you also have the right to lodge a complaint with a supervisory authority.

Data Security

We are committed to protecting the security and integrity of your data. Lewisham Florist implements appropriate organisational and technical measures, such as encryption, secure servers, and access controls, to guard against unauthorised access, disclosure, alteration, or destruction of your personal information.

International Transfers

Your personal information is generally stored and processed within the United Kingdom and European Economic Area (EEA). Where our service providers operate outside the EEA, we ensure they uphold adequate data protection standards and comply with GDPR requirements, using standard contractual clauses or equivalent safeguards as appropriate.

Policy Updates

We may update this policy as needed to comply with changes in the law or to reflect changes in our data practices. Any changes will become effective when posted to our website. We encourage you to review this policy periodically to stay informed of how we protect your data.

Contact and Complaints

If you have any questions regarding this Privacy Policy or our use of your personal data, please refer to our website for contact information. We endeavour to address all queries promptly and transparently.