Wembley Florist Customer Privacy Policy

Introduction

Wembley Florist is committed to safeguarding the privacy and personal data of all customers placing orders in Wembley and the surrounding districts. This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable UK data protection legislation. It also sets out your rights regarding your information. By placing an order with Wembley Florist, you agree to the terms of this Privacy Policy.

Scope of this Policy

This Privacy Policy applies to all individuals who place orders with Wembley Florist, whether through our website, over the phone, or in person, and covers the processing of personal data relating to orders made from Wembley and surrounding districts.

What Personal Data We Collect

Wembley Florist collects specific personal data necessary for processing your order and providing floral delivery services. The types of information we may collect include:

• Identity Data: Your full name.
• Contact Data: Delivery address, billing address, telephone number.
• Order Details: Purchase information, recipient names and delivery instructions.
• Payment Data: Partial payment information as required by payment processors (we do not store complete card or bank details on our systems).
• Communication Data: Correspondence you send to us (e.g. order queries or complaints).
• Technical Data: Where orders are placed online, we may collect information such as IP address, browser type, operating system, and browsing behaviour as part of standard website analytics. This is typically anonymised.

Lawful Basis for Processing Your Data

Under GDPR, Wembley Florist must have a valid lawful basis for processing your personal data. Our main lawful bases are:

• Contractual Necessity: We require certain information to process, fulfil, and deliver your order, including fulfilling any after-sales services.
• Legal Obligation: We may process your data to fulfil legal or tax obligations, such as maintaining transaction records.
• Legitimate Interests: For business administration, record-keeping, and development of our services, where these interests do not override your privacy rights.
• Consent: For direct marketing communications, we only use your data with your specific consent, which you can withdraw at any time.

How We Use Your Personal Data

Your personal data is used solely for the purpose of:

• Processing and fulfilling your order
• Contacting you regarding your purchase
• Delivering flowers and communicating with recipients as required
• Managing payments and refunds
• Meeting tax and accounting requirements
• Improving our products and services
• Providing customer service and support
• Sending marketing communications if you have opted in

Data Processors and Third Parties

To facilitate our services, we may share your personal information with trusted third parties who act as data processors. These may include:

• Payment processors: Securely handling your payments.
• Delivery partners: Enabling delivery of your orders to the specified recipient.
• IT service providers: Supporting the security and performance of our website and databases.
• Professional advisors: Such as accountants, legal representatives, or auditors, in compliance with our legal obligations.

All processors are contractually bound to process your data only on our instructions and in accordance with GDPR. We do not sell or trade your personal data with third parties for marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory requirements, or to resolve disputes and enforce our agreements. In general:

• Order-related data is retained for up to seven years to meet accounting and tax obligations.
• Marketing data (when you have consented) will be retained until you withdraw your consent or unsubscribe.
• Technical analytics data is anonymised and aggregated wherever possible.

Once data is no longer required, it is securely deleted or anonymised.

Your Data Protection Rights

Under GDPR and applicable UK law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Ask us to delete your personal data in certain circumstances (also known as the ‘right to be forgotten’).
• Right to Restrict Processing: Ask us to suspend the processing of your data in specific situations.
• Right to Data Portability: Request a copy of your personal data in a commonly used format.
• Right to Object: Object to our processing of your data where we rely on legitimate interests or use your data for direct marketing.
• Rights in Relation to Automated Decision Making: You have the right not to be subject to automated decisions that have legal or similarly significant effects.

To exercise these rights, please contact us using the details provided on our website or with your order. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are dissatisfied with how your data is handled.

How We Protect Your Data

Wembley Florist employs technical and organisational security measures to protect your information from unauthorised access, use, or disclosure. These measures include encryption, firewalls, secure data storage, access controls, and regular security reviews. Our staff receive data protection training and personal data is accessible only by those who need it for their role.

Changes to this Privacy Policy

We may periodically update this Privacy Policy to reflect changes to our data processing practices or the law. Any updates will be made available in store and on our website, with the date of the last revision indicated at the bottom of the policy. Please consider reviewing this policy periodically.

Contact and Further Information

If you have any questions about this Privacy Policy or your personal data, please refer to the contact details available at Wembley Florist or request a copy in store. Our team is always happy to assist you with data protection queries or to support you in exercising your rights.

This Privacy Policy was last updated in June 2024.