Florist Blackheath Privacy Policy

Overview

This Privacy Policy explains how Florist Blackheath collects, uses, stores, and protects the personal information of our customers, in compliance with the General Data Protection Regulation (GDPR). It applies to all individuals who place orders with Florist Blackheath from Blackheath and the surrounding districts. We are committed to ensuring your privacy and safeguarding your personal data.

What Data We Collect

Florist Blackheath collects and processes various types of personal data from customers placing orders for our products and services. The types of data we may collect include:

  • Identity Data: Your name, and the names of recipients (if you are sending flowers to someone else).
  • Contact Data: Billing address, delivery address, telephone numbers, and other relevant contact details.
  • Order Data: Details about your order, such as product selection, special instructions, occasion, and delivery date.
  • Payment Data: Payment card details, payment transaction information (though we do not store full card data after payment is processed; see third-party processors below).
  • Correspondence: Records of communication with us, including customer support inquiries or order-related messages.
  • Technical Data: Limited information about your device, IP address, browser type, and usage statistics, where relevant for website usage analytics.

Lawful Basis for Processing

Florist Blackheath only processes personal data when there is a lawful basis to do so, as defined by Article 6 of the GDPR. Our lawful bases include:

  • Contractual Necessity: Most of the data we collect is necessary to fulfill the contract between you and Florist Blackheath. For example, we require your contact and delivery information to process and deliver your flower order.
  • Legal Obligation: We may process and retain your data to comply with legal and statutory obligations, such as taxation, accounting, or anti-fraud regulations.
  • Legitimate Interests: In some cases, we may use your information for our legitimate business interests, such as service improvement or responding to your queries, provided these interests do not override your fundamental privacy rights.
  • Consent: Where required by law, such as for marketing communications, we will seek your explicit consent. You have the right to withdraw this consent at any time.

How We Use Your Information

The personal data we collect is used solely for purposes directly related to your engagement with Florist Blackheath, such as:

  • Processing, confirming, and delivering your orders.
  • Managing customer support and responding to your inquiries.
  • Processing payments and accounting.
  • Improving our services and website experience.
  • Complying with applicable laws and regulations.
  • Sending marketing communications, if you have given your consent.

Data Retention

Florist Blackheath retains your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying any legal, accounting, or reporting obligations. Typically, this means:

  • Order and transaction data are retained for a minimum of six years to meet accounting and legal requirements.
  • If you have created an account with us, your data may be retained for as long as your account is active, or until you request deletion, subject to any overriding legal responsibilities.
  • Personal data collected on the basis of consent for marketing will be retained until your consent is withdrawn.
  • In cases of unresolved disputes or legal matters, some data may be retained until those matters are concluded.

Third-Party Processors

Florist Blackheath engages carefully selected third-party service providers ("processors") to assist in delivering our services. These may include:

  • Payment processing companies who handle secure card transactions. We do not store your full card details.
  • Delivery services for the physical fulfillment of orders.
  • IT and web hosting providers responsible for maintaining our digital infrastructure.
  • Professional advisors such as accountants and legal professionals to ensure compliance with our obligations.

We have data processing agreements in place with all such providers, requiring them to respect the security of your personal data and to process it only in accordance with our instructions and applicable laws. We do not sell or share your data for unrelated third-party marketing purposes.

User Rights

Under the GDPR, you have several important rights in relation to your personal data, including:

  • Right of Access: You may request information about the personal data we hold about you and obtain a copy of that data.
  • Right to Rectification: If your data is incorrect or incomplete, you can ask us to correct it.
  • Right to Erasure: You may request that we erase your personal data, subject to legal or contractual retention obligations.
  • Right to Restrict Processing: You can request the restriction of processing of your personal data in certain circumstances.
  • Right to Data Portability: You can obtain and reuse your personal data for your own purposes across different services.
  • Right to Object: You can object to certain types of processing, such as direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw this at any time.

We will respond to any valid requests within one month. In some situations, we may need to verify your identity to process your request.

Data Security

Florist Blackheath is committed to maintaining the security of your personal data. We implement appropriate technical and organisational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures are regularly reviewed and updated to ensure the highest standard of data security.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business processes. Any significant changes will be communicated clearly to our customers. We encourage you to review this policy periodically so you remain informed of how we protect your privacy.

Contact and Complaints

Should you have any questions or wish to exercise your data protection rights, please contact us through our website or via the contact methods provided on our platform. If you remain dissatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority.

Thank you for choosing Florist Blackheath. We value your trust and are committed to protecting your personal data at every stage of your interaction with us.