Florists Belgravia GDPR Privacy Policy

Introduction

This Privacy Policy explains how Florists Belgravia ('we', 'our', 'us') collects, uses, stores, and protects your personal information when you place an order with us. This policy applies to all customers and users placing orders from Florists Belgravia and surrounding districts. We are committed to protecting your privacy and providing transparency regarding our data processing activities in accordance with the General Data Protection Regulation (GDPR).

What Data We Collect

We collect different types of personal data to fulfil your orders and provide you with the best possible service. The categories of personal data we may collect include:

• Identity Data: Name, title, and (where applicable) company name.
• Contact Data: Billing and delivery addresses, telephone numbers, and other provided contact details.
• Order Information: Details relating to your order such as product selections, delivery instructions, gift messages, and any special requests.
• Payment Information: Payment method and transaction details—but please note that we do not store full card details on our systems.
• Communications Data: Records of your communications with us, including emails or messages sent in the course of your order.
• Technical Data: IP address, browser type, and usage data collected via cookies and similar tracking technologies to help us improve our services and website functionality.

Lawful Basis for Processing Your Data

Under the GDPR, we are required to have a lawful basis for processing your personal data. Florists Belgravia typically processes your data on the following bases:

• Contractual Necessity: To process, fulfil, and deliver your orders and to communicate with you regarding your purchase.
• Legitimate Interests: To provide, develop, and improve our products and services, to communicate with you regarding similar products, prevent fraud, and maintain the security of our website.
• Legal Obligation: To comply with relevant laws, regulations, and lawful requests by public authorities (such as tax or regulatory obligations).
• Consent: In some cases, for marketing communications if you have opted in. You have the right to withdraw your consent at any time.

How We Use Your Data

Your data is used for the following purposes:

• Processing and managing your orders and deliveries.
• Managing our relationship with you, including customer support and responding to enquiries.
• Improving our products and services based on your feedback and order preferences.
• Marketing communications and promotional offers where you have agreed to receive them.
• Meeting our legal and regulatory obligations.

Data Retention

Florists Belgravia will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the type of data and the reason for processing. In general:

• Order and transaction records are retained for up to seven years to comply with tax and accounting requirements.
• Marketing contact details are retained until you withdraw your consent or opt out.
• Any account-related information may be maintained as long as your association with us remains active.
• Communication records are usually stored for up to two years for quality assurance and dispute resolution.

After the applicable retention period, your data will be securely deleted or anonymised.

Third-Party Data Processors

We may share your personal data with trusted third parties who act as 'processors' under GDPR, namely, companies who provide services that enable us to fulfil your order and operate our business. These include:

• Payment service providers for secure transaction processing.
• Delivery partners and couriers to ensure accurate and timely delivery of your orders.
• Website hosting and IT support providers to maintain the functionality and security of our digital platforms.
• Marketing and communications platforms (where you have consented to receive such communications).
• Professional advisers (auditors, accountants, legal consultants) where necessary to fulfil our legal obligations.

All such parties are required to process your data only for specified purposes and in accordance with our instructions. We ensure that they operate with adequate levels of security and confidentiality.

Data Security

We are committed to ensuring the security of your personal data. We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, accidental loss, disclosure, or destruction. These measures include encrypted payment transactions, secure access controls, and regular staff training on data protection.

Your Rights Under GDPR

As a data subject, you have the following rights with respect to your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you can ask us to delete your personal data.
• Right to Restriction of Processing: You may request limitation of the processing of your personal data.
• Right to Data Portability: You can receive your data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
• Right to Object: You may object to our processing of your personal data on grounds relating to your particular situation, including for direct marketing purposes.
• Right to Withdraw Consent: If processing is based on your consent, you are free to withdraw it at any time without affecting the lawfulness of processing before its withdrawal.

To exercise your rights or for more information, please contact us using the details provided on our website.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any significant changes will be communicated via our website. We encourage you to review this policy regularly to remain informed on how we protect your personal data.

Contact and Complaints

If you have questions about this Privacy Policy or wish to make a complaint in relation to how we handle your personal data, please contact us through the contact methods provided on our website. If you are not satisfied with our response, you have the right to raise your concern with the local supervisory authority for data protection.

Thank you for trusting Florists Belgravia with your information. Your privacy and trust are of utmost importance to us.