Florist Stratford Privacy Policy

Introduction

Florist Stratford is committed to protecting the privacy of our customers. This Privacy Policy explains how we collect, use, store, and process your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy applies to all customers placing orders with Florist Stratford from Stratford and its surrounding districts.

What Data We Collect

When you place an order with Florist Stratford, we collect a range of personal information to fulfil your request. The types of data we collect may include:

• Identity Data: Name, title, and contact details (such as address and telephone number).
• Order and Delivery Information: Recipient’s name, address, contact details, and order notes.
• Payment Information: Payment card details or other payment transaction information (processed via secure third-party payment processors; we do not store your full payment card numbers).
• Correspondence: Records of your communications with us, including order instructions, enquiries, feedback, and complaints.
• Technical Data: IP addresses, device identifiers, and website usage data (such as access times and referring websites) when you use our website for ordering.

Lawful Basis for Processing Your Data

Under the GDPR, we are required to have a valid lawful basis to process your personal data. Florist Stratford processes your data on one or more of the following legal bases:

• Contractual necessity: The processing is necessary to perform the contract with you, such as fulfilling and delivering your floral order.
• Legitimate interests: We may process your data for legitimate business interests, such as improving customer experience, quality control, and fraud prevention, provided those interests are not overridden by your rights and interests.
• Legal obligation: We may need to process certain data to comply with legal or regulatory requirements, such as accounting and tax obligations.
• Consent: Where required, we will request your clear and informed consent, for example, for sending marketing communications. You have the right to withdraw your consent at any time.

How We Use Your Personal Data

Your personal information is used for the following purposes:

• Processing and fulfilling your orders for floral arrangements and related products.
• Communicating with you regarding your order, deliveries, and customer service enquiries.
• Managing payments and preventing fraudulent transactions.
• Improving our products, services, and website based on user feedback and usage data.
• Complying with applicable legal and regulatory obligations.
• With your consent, sending occasional marketing updates and promotions (if you opt in).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period is determined based on:

• The duration of our customer relationship with you.
• The nature and sensitivity of the information.
• Legal, regulatory, and business requirements (for example, financial transaction records are securely retained for up to seven years as required by law).

Once the retention period has finished, your data will be securely erased or anonymised so that it can no longer be associated with you.

Data Processors and Third Parties

We may engage trusted third-party service providers (“data processors”) to help us operate our business and provide our services to you. Examples include payment processors, delivery partners, website hosting providers, and IT support services. These third parties only access your data as necessary to perform their functions and are required to process your information in accordance with this Privacy Policy and applicable data protection law.

Florist Stratford does not sell or rent your personal data to third parties for their own marketing purposes. We will share your personal data with other parties only:

• To fulfil your order (for example, passing address details to delivery personnel).
• To comply with legal obligations (for example, providing transaction records to regulatory authorities, if required).
• When you have given explicit consent for such sharing.

Your Rights Under GDPR

The GDPR provides you with various rights regarding your personal data. These include:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You can request corrections to any inaccurate or incomplete information.
• Right to erasure: Under certain conditions, you can ask us to delete your personal data.
• Right to restrict processing: You have the right to limit the way we use your data in specific circumstances.
• Right to data portability: You can ask us to transfer your data to you or another service provider, where technically feasible.
• Right to object: You can object to processing based on legitimate interests or to receiving direct marketing communications.
• Right to withdraw consent: Where we rely on your consent to process your data, you may withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us using the usual customer service channels. We may request further information from you to confirm your identity before responding to your request.

Data Security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, disclosure, alteration, or destruction. This includes secure storage systems, limited access controls, regular staff training, and use of reputable IT service providers. While we strive to protect your information, please note that no data transmission over the internet can be guaranteed to be 100% secure.

Policy Scope and Updates

This Privacy Policy applies to all individuals placing orders with Florist Stratford located in Stratford and the surrounding districts. We may update this policy from time to time to reflect changes in legal requirements or our data processing practices. If we make significant updates, we will notify you via prominent notices on our website or as otherwise appropriate.

Contact and Further Information

If you have any questions about how your data is handled or wish to exercise your rights, please get in touch with our data protection team through our standard customer service contact channels. We take your privacy seriously and will do our utmost to address your concerns promptly and transparently.