Florist Lea Bridge Privacy Policy for Customers

Introduction

This Privacy Policy describes how Florist Lea Bridge ("we", "us", or "our") collects, uses, stores, and protects your personal data when you place orders with us from Lea Bridge and surrounding districts. We are committed to ensuring that your privacy is respected and protected in accordance with the General Data Protection Regulation (GDPR). By placing an order with Florist Lea Bridge, you agree to the terms set out in this Privacy Policy.

What Data We Collect

When you place an order or make contact with Florist Lea Bridge, we may collect the following types of personal data:

  • Identification Information: Your full name, and if you are ordering flowers for delivery to someone else, their name as well.
  • Contact Details: Billing address, delivery address, telephone number, and any relevant contact details required to process your order.
  • Order Information: Details of the items you order, order notes (such as card messages), and transaction history with us.
  • Payment Information: Information relating to how you pay, such as payment method and transaction confirmations (note: we do not store full payment card details as these are processed securely by our payment processors).
  • Correspondence: Records of communications with you, such as queries or complaints, whether via website forms, letters, or phone calls.

We do not collect special categories of personal data (such as health or religious information) as standard practice. If you provide such information in order notes or messages, you do so voluntarily.

Lawful Basis for Processing Personal Data

Our collection and use of your personal data is always justified by a legal ground under GDPR. The lawful bases that apply include:

  • Contractual Necessity: We process data as required to fulfil your order and deliver flowers or related goods and services.
  • Legal Obligations: We may process personal data to meet legal requirements, such as accounting, tax, or regulatory reporting obligations.
  • Legitimate Interests: For purposes such as record-keeping, responding to enquiries, improving our service, fraud prevention, and ensuring network security. When relying on legitimate interests, we ensure these are balanced against your rights and freedoms.
  • Consent: Where you choose to receive marketing communications from us, or if you share data that is not required for order fulfilment, we rely on your explicit consent. You can withdraw your consent at any time.

How We Use Your Data

Your personal information is used solely for the following purposes:

  • Processing and fulfilling your floral orders.
  • Arranging deliveries and keeping you informed of order status.
  • Managing payments and sending order confirmations or receipts.
  • Responding to customer questions, concerns, or complaints.
  • Maintaining accurate business and financial records.
  • Meeting any applicable legal or regulatory obligations.
  • Sending you marketing communications if you have opted in to receive them (you may opt-out at any time).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Our data retention period is as follows:

  • Order Information: Retained for up to 7 years to comply with tax and accounting regulations.
  • Customer Correspondence: Retained for up to 3 years after your last contact with us.
  • Marketing Consent: Retained until you withdraw your consent or unsubscribe.

After these periods, your data will be securely deleted or anonymised, unless continued storage is required by law.

Data Processors and Third Parties

Florist Lea Bridge uses trusted third-party service providers to assist with order processing, deliveries, payment processing, and IT support. These may include:

  • Payment Service Providers: To securely process card and electronic payments. We do not store full payment card details.
  • Delivery Couriers: To deliver your order to the specified recipient.
  • IT and Database Providers: To host and maintain our ordering and communications systems.

All such processors are required under contract to handle your information only on our instructions and in compliance with the GDPR. We do not sell your personal data or share it with unauthorized third parties.

User Rights Under GDPR

You have the following rights regarding your personal data held by Florist Lea Bridge:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Request correction of any inaccurate or incomplete data.
  • Erasure: Request that we delete your personal data, subject to certain legal limitations.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to our processing of your personal data in certain cases, such as direct marketing.
  • Data Portability: Request that your personal data is provided to you in a structured, commonly used format, or transferred to another service provider where technically feasible.
  • Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw this at any time without affecting the lawfulness of processing prior to withdrawal.

If you wish to exercise any of your rights, please contact our privacy representative by post or in person at our premises. You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your rights have been breached.

Security and Data Storage

We are committed to protecting your personal data from unauthorized access, loss or misuse. We implement technical and organizational measures such as access controls, secure servers, encrypted communications, and regular system audits to secure your data. Only personnel and partners who require access to your information for legitimate business reasons are permitted to do so.

Policy Scope and Updates

This Privacy Policy applies to all customers placing orders with Florist Lea Bridge for delivery in Lea Bridge and surrounding districts, regardless of the method of order (in person, by phone, or online). We may update this policy from time to time to reflect changes in our practices or legal requirements. Any updates will be made available at our premises and through our ordering channels, with the date of the latest revision clearly indicated.

Contact and Further Information

If you have questions about this Privacy Policy, your data, or how we use your information, please contact our designated privacy representative at our Florist Lea Bridge premises. We are dedicated to addressing your concerns professionally and transparently.

Last updated: June 2024