Florist Cheam Privacy Policy and Data Protection

Introduction

At Florist Cheam, we are dedicated to protecting the privacy and personal data of our customers. This Privacy Policy outlines how we comply with the General Data Protection Regulation (GDPR) when you place an order with us. It explains how we collect, use, store, share, and protect your information, as well as your rights regarding your data. This policy applies to all customers ordering from Florist Cheam in Cheam and surrounding districts.

What Personal Data We Collect

When you place an order or interact with Florist Cheam, we collect the minimum data necessary to process your order and provide excellent service. The specific data we collect include:

• Identity Data: Your full name (and optionally the recipient’s name if you are sending flowers to someone else).
• Contact Data: Delivery address, billing address, and/or postcode within Cheam and nearby areas. Additionally, we may collect email address or phone number for order communication and delivery coordination.
• Order Details: Product selections, messages for bouquets, and customer preferences regarding delivery.
• Payment Details: We process payment data through trusted third-party payment processors. Your full card/payment information is not stored or accessed by Florist Cheam.
• Technical Data: Device/browser information, IP address, and usage data when you visit our website, collected to enhance user experience and website security.

Lawful Basis for Processing Your Data

We only process your personal data when we have a lawful reason to do so. The main legal grounds under GDPR are:

• Contractual Necessity: To fulfil our contract with you in processing and delivering your order.
• Legal Obligation: Where necessary to comply with applicable laws or regulations.
• Legitimate Interests: For improving our services, preventing fraud, and ensuring the security of our platform, provided that your interests and fundamental rights do not override those interests.
• Consent: Where required, such as for direct marketing or special offers, we will obtain your explicit consent, and you can withdraw this consent at any time.

How We Use Your Personal Data

Florist Cheam uses your data only for the purposes for which it was collected, including:

• Processing and delivering your flower orders, arranging delivery logistics, and ensuring correct recipient details.
• Communicating with you regarding your order status, delivery updates, and customer service requests.
• Processing your payments safely through third-party providers.
• Improving our services, website performance, and user experience, which may involve statistical analysis of anonymised data.
• Complying with any legal obligations and resolving disputes if necessary.

How Long We Retain Your Data

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention periods are:

• Order Data: Retained for a minimum of 6 years in accordance with local tax and accounting laws.
• Communication Data: Retained for up to 2 years from the date of last contact, unless a longer period is required by law.
• Payment Data: Not stored by Florist Cheam; processed only through secure third-party payment platforms.
• Technical Data: Retained for no longer than 12 months for analysis and security purposes.

Once the retention period ends, we securely erase or anonymise your data so you can no longer be identified.

Data Processors and Third-Parties

To provide our services and deliver your orders, we may share elements of your data with trusted third parties who act as data processors on our behalf. These include:

• Delivery Partners: To ensure successful delivery of your order within Cheam and surrounding districts.
• Payment Processors: For secure and compliant processing of transactions. Florist Cheam never stores full card details.
• IT Service Providers: Companies that assist with maintaining our website and database security.

All processors are contractually obligated to comply with GDPR regulations, protect your data, and process it only on our instructions. We do not share your data with any third parties for independent marketing or unrelated purposes.

Your Data Protection Rights

Under GDPR, you have several important rights in relation to your personal data processed by Florist Cheam:

• Right of Access: You can request details about what personal data we hold about you.
• Right to Rectification: You may request correction of incomplete or inaccurate data.
• Right to Erasure: You can request the deletion of your data when it is no longer needed or if processing is unlawful.
• Right to Restrict Processing: You may request us to limit the processing of your data under certain circumstances.
• Right to Data Portability: You can request a copy of your data in a commonly used machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests or direct marketing purposes.
• Right to Withdraw Consent: Whenever we rely on your consent, you may withdraw it at any time.

To exercise your rights, please contact us using the methods provided in your order confirmation or via our standard customer service communication channels. We may require proof of identity for security purposes before processing requests.

Security of Your Data

We employ appropriate technical and organisational measures to ensure the confidentiality, integrity, and availability of your personal data. This includes secure servers, access controls, regular staff training, and selection of GDPR-compliant processors. While we strive to use commercially acceptable means to protect your data, absolute security cannot be guaranteed. We encourage you to safeguard any order information or communication devices you use when ordering from Florist Cheam.

Policy Scope and Updates

This policy applies to all Florist Cheam customers placing orders within Cheam and all neighbouring districts we serve. We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data practices. If significant changes are made, we will notify customers where possible and update the policy displayed on our website or within our ordering channels. Please review this policy regularly to remain informed about how we protect your data.

Contact and Concerns

If you have any questions, concerns, or requests regarding your personal data, please contact our Data Protection Lead using the communication details provided in your order confirmation. If you believe your data has not been handled appropriately, you may also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Your privacy is of the utmost importance to Florist Cheam. We are committed to ensuring your data is handled lawfully, transparently, and with respect.