Privacy Policy for Bermondsey Florist Customers

Introduction

This Privacy Policy describes how Bermondsey Florist collects, uses, stores, and protects your personal information when you place orders with us, whether you are located in Bermondsey or the surrounding districts. We are committed to safeguarding your privacy and ensuring the protection and integrity of your personal data in accordance with the UK General Data Protection Regulation (GDPR).

Scope of this Policy

This policy applies to all customers who place an order for flowers or related products or services with Bermondsey Florist within Bermondsey and adjacent districts. By placing an order or interacting with our services, you are agreeing to the terms outlined in this Privacy Policy.

What Data We Collect

Bermondsey Florist collects and processes only the information necessary to fulfil your orders, provide customer service, and comply with legal obligations. The data collected may include:

• Identity Data: Your name, and, if applicable, names of gift recipients.
• Contact Data: Address, postcode, delivery location, and contact details (such as phone number).
• Order Data: Details about the items purchased, special delivery instructions, and any messages included with your order.
• Payment Data: Transaction details (note: we do not store card numbers); payment is processed securely by our payment provider.
• Correspondence: Any messages, feedback, or interactions through our order channels.
• Technical Data: IP address and browser type (if you place orders online), which are collected automatically for security and analytics purposes.

The Lawful Basis for Processing Data

Under the GDPR, we must identify a lawful basis for collecting and processing your personal data. The primary lawful bases we rely on include:

• Contractual Necessity: We require certain personal information to process and deliver your order, and to communicate with you regarding your purchase.
• Legal Obligation: We may process personal data when required to comply with the law, such as for tax or accounting purposes.
• Legitimate Interest: We may process your data for legitimate business interests, such as improving our services, responding to enquiries, or processing feedback.
• Consent: Where we request additional information or use your data for marketing, we will always seek your explicit consent.

How We Use Your Data

We use the data we collect for the following purposes:

• Processing, preparing, and delivering your order.
• Notifying you about your order status, delivery updates, or addressing any issues or questions you may have.
• Managing customer support and handling complaints.
• Complying with our legal and regulatory obligations.
• Building anonymised statistical insights to help improve our products and services.

Data Retention

Your personal information will only be retained for as long as necessary to fulfil the purposes for which it was collected. Typically, we retain order information for seven years to comply with legal and accounting obligations. After this period, your data will be securely deleted or anonymised. If you contact us to exercise your data rights (as detailed below), your request will be actioned in accordance with the applicable law.

Processors and Data Sharing

Bermondsey Florist works with trusted third parties (data processors) to help deliver our services. These may include payment providers, delivery partners, IT and security service providers, and bookkeeping or accounting services. All such processors are required to process your data only on our instructions and in line with data protection regulations, ensuring appropriate safeguards are in place.

We do not sell or rent your personal data to any third parties. We may only disclose your data where required by law or when necessary to protect the safety and rights of ourselves, our customers, or the public.

Data Security

Bermondsey Florist uses appropriate technical and organisational measures to ensure your personal data is kept secure. This includes staff training on data protection, secure storage of physical records, restricted access to digital files, and regular review of our security procedures.

Your Rights Under GDPR

Right to Access: You have the right to request access to your personal data held by Bermondsey Florist.
Right to Rectification: You can request that we correct or update inaccurate or incomplete information.
Right to Erasure: In certain circumstances, you can request that your data is deleted where there is no compelling reason for its continued processing.
Right to Restrict Processing: You have the right to ask us to restrict how we use your data.
Right to Object: In some circumstances, you can object to our processing of your personal information. Right to Data Portability: Where appropriate, you may request the transfer of your data to another service provider.

To exercise any of these rights, please contact us using the methods provided on our website or in our shop. We may need to verify your identity before fulfilling your request and will respond within the timelines specified by GDPR.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The most up-to-date version will be available in our shop and on our website, with the effective date clearly indicated. Please check this policy regularly to stay informed of how we protect your privacy.

Contact and Further Information

If you have questions about this policy, your data rights, or how we use your information, please consult our website or speak to a member of staff in our shop. We are committed to working with you to resolve any concerns and ensuring your privacy remains protected at all times.