Florist Tooting Bec Privacy Policy Statement

Introduction

This Privacy Policy explains how Florist Tooting Bec ('we', 'our', or 'us') processes and protects personal data of customers ordering from Tooting Bec and the surrounding districts. We are committed to ensuring that your privacy is protected and that we handle your data in compliance with the UK General Data Protection Regulation (GDPR) and relevant data protection legislation.

Personal Data We Collect

When you place an order or interact with us as a customer, we may collect the following categories of personal data:

• Identity Data: Such as your name, title, and, if required, recipient names for ordered flowers.
• Contact Data: Including billing address, delivery address, and contact details (phone number if supplied, and postal address).
• Order Information: Details of products purchased, delivery instructions, messages for recipients, and transaction records.
• Payment Data: We may receive limited payment-related data (such as payment confirmation), though card information is processed securely by our payment processor and not stored by us.
• Technical and Usage Data: Includes your IP address, browser type, time zone setting, and details about how you use our website if you interact online.

Depending on your interaction, you may choose to provide or withhold certain data. However, some details (such as delivery address and recipient name) are necessary for fulfilling your order.

Lawful Basis for Processing Personal Data

Under GDPR, we must have a legal basis for processing your personal data. Florist Tooting Bec relies on the following purposes:

• Contractual Necessity: Most of the data we collect is required in order to process and fulfill flower orders placed by you, provide customer support, and handle payments and deliveries.
• Legal Compliance: We may process or retain personal data to comply with tax, accounting, or other legal obligations.
• Legitimate Interests: We use certain data (for example, to improve our services or to prevent fraud) where it does not override your rights and interests.
• Consent: If we ever use your data for purposes not directly covered by the above (such as direct marketing), we will seek your clear consent in advance.

How We Use Your Personal Data

Florist Tooting Bec uses customer data for the following specific reasons:

• Processing and delivering your flower orders, including updating you on delivery status.
• Recording transaction history for accounting and legal record-keeping.
• Providing customer support or managing complaints and queries.
• Improving our products and services by understanding customer preferences.
• Protecting our business and customers from fraud and abuse.

Who Processes or Receives Your Data

We treat your data with care and confidentiality. We may share your data in limited circumstances and only with trusted parties, as follows:

• Payment Processors: Secure third-party payment providers process debit or credit card transactions on our behalf. We do not retain your full payment card data.
• Delivery Partners: In order to deliver your orders, recipient contact information or delivery details may be shared with our delivery team or trusted couriers operating in Tooting Bec and nearby areas.
• Service Providers: IT, website, and data storage providers who support our systems may have access to your data under strict confidentiality agreements.
• Legal or Regulatory Bodies: We may share data as required by law, in response to legal requests, or for the protection of our business.

We do not sell or rent your personal data to third parties.

International Data Transfers

Florist Tooting Bec aims to keep your data within the United Kingdom or European Economic Area (EEA). If any data processing occurs outside these regions, it is subject to robust safeguards and legal protections to ensure your data receives the same standard of security as within the UK/EEA.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, which includes fulfilling any orders, meeting accounting and legal obligations, and handling any potential customer disputes. Typically, we keep customer orders and related personal data for up to six years to comply with HMRC and other regulatory requirements, after which information is securely deleted or anonymised unless we are required to retain it for a longer period by law.

Data Security

Your data security is our priority. We use appropriate organisational and technical measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. This includes secure storage of records, limiting access to personal data to authorised personnel only, and ensuring the safe disposal of data when no longer required.

Your Rights

As a data subject within the UK or EEA, GDPR grants you several rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct or update any inaccurate or incomplete information.
• Right to Erasure: In certain circumstances, you can request deletion of your personal data.
• Right to Restrict Processing: You may ask to limit how we use your data.
• Right to Data Portability: You can ask to receive your data in a commonly used format or for us to transfer it to another provider.
• Right to Object: You may object to the way we use your data where processing is based on legitimate interests or direct marketing.
• Right to Withdraw Consent: If data processing is based on your consent, you may withdraw it at any time.
• Right to Lodge a Complaint: If you are concerned about how we use your data, you can contact the Information Commissioner's Office or relevant authority.

Changes to This Policy

This Privacy Policy applies to all customers placing flower orders with Florist Tooting Bec from Tooting Bec and the surrounding districts. We may update this Policy from time to time to reflect changes in the law or our business operations. The most up-to-date version will always be available with your orders and on request.

Contact and Further Information

If you have any questions, wish to exercise your rights, or require further details about our privacy practices, please contact us using the details provided with your order or at our shop. We take your privacy seriously and will respond promptly to all inquiries and requests regarding your personal data.