Florist Brixton Privacy Policy
Privacy Policy for Florist Brixton Customers
This Privacy Policy explains how Florist Brixton collects, uses, stores, and protects your personal data when you place an order with us. It also outlines your rights according to the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Florist Brixton for delivery or collection in Brixton and surrounding districts.
1. Data We Collect
When you order flowers from Florist Brixton, we collect specific information necessary to process your order and offer you our services. The categories of data we may collect include:
- Contact Information: Name, billing and delivery address, telephone number, and payment details.
- Order Information: Details of the floral products you purchase, recipient’s name, and a personalised message if provided.
- Transaction Data: Order dates, amounts paid, and methods of payment (we do not store full card details).
- Communication Data: Any communications, feedback, or correspondence between you and Florist Brixton.
- Technical Data: When you use our website, we may collect your IP address, browser type, device information, and cookie data for website functionality and security purposes.
2. Lawful Basis for Processing
We rely on lawful grounds to process your personal data under the GDPR, including:
- Contract Performance: Your data is necessary for us to take steps at your request prior to entering into a contract and to fulfil your orders and requests.
- Legitimate Interests: We may use your information to enhance our services, prevent fraud, and improve our customer experience, provided your rights do not override these interests.
- Legal Obligation: Certain data may be used to comply with relevant laws and requirements, such as record-keeping for tax purposes.
- Consent: Where required, we will seek your explicit consent to process your data for specific purposes, such as sending marketing communications. You can withdraw consent at any time.
3. How We Use Your Information
Your information is used to:
- Process and deliver your flower orders, including delivery of orders to recipients.
- Contact you with order updates, confirmations, or to resolve any issues.
- Respond to your queries or customer service requests.
- Improve our products, services, and website experience.
- Conduct internal analysis and reporting (using anonymised data where possible).
- Meet our legal and regulatory obligations.
4. Data Sharing and Processors
Florist Brixton only shares your personal data when necessary and in compliance with data protection requirements. We may share your data with:
- Payment Processors: To process your payments securely (your full card information is not stored by us).
- Delivery Partners: Couriers and delivery personnel to fulfil your order to the intended recipient.
- IT Service Providers: Companies that help us host our website, manage our databases, and provide technical support. These providers cannot use your information for their own purposes.
- Legal or Regulatory Authorities: When required to do so by law or in response to lawful requests.
All third-party processors are bound by data protection agreements to ensure your data is processed securely and appropriately.
5. Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, this period is:
- Order and Transaction Information: Retained for up to six years to comply with tax and accounting obligations.
- Customer Communications: Retained as long as you remain an active customer or until your query has been resolved, and for a reasonable period thereafter.
- Marketing Data: Retained until you opt out or withdraw your consent.
All data is securely deleted or anonymised when it is no longer needed.
6. Data Security
We employ appropriate technical and organisational measures to protect your data from unauthorised access, accidental loss, or disclosure. These measures include data encryption, restricted access, and regular security reviews. Only authorised personnel and verified processors have access to your personal information as necessary to perform their duties.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to Restrict Processing: Ask us to suspend processing of your data under certain conditions.
- Right to Data Portability: Obtain and reuse your personal data for your own purposes across different services.
- Right to Object: Object to processing for direct marketing or due to your particular circumstances.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the communication mechanisms provided on our website or in-store. We will respond to all legitimate requests within one month, unless the request is complex or excessive, in which case we may extend this period by a further two months and will inform you.
8. Policy Changes
Florist Brixton may update this Privacy Policy from time to time. Any significant changes will be highlighted on our website. Please review this policy regularly to ensure you are aware of any updates.
9. Contacting Florist Brixton About Privacy
If you have any concerns or questions regarding how we handle your personal data, or if you wish to make a complaint, please contact us using our official contact channels or by visiting our store. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
This Privacy Policy is effective from the date of last update indicated at the top of this page.
