Greenwich Florist Privacy Policy

Introduction

At Greenwich Florist, we are committed to safeguarding the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Greenwich Florist, whether you reside in Greenwich or the surrounding districts. Please read this policy carefully to understand your rights and how we process your information.

What Data We Collect

To fulfil your orders and provide a seamless shopping experience, Greenwich Florist may collect the following categories of personal data:

• Identity Data: Full name, title, and contact preferences.
• Contact Data: Delivery address, billing address, postcode, and phone number(s).
• Order Data: Details of your floral orders, delivery instructions, and purchase history.
• Payment Data: Payment card information (processed securely via our payment processors), and transaction records.
• Correspondence: Any enquiries, feedback, or communications you send us regarding your orders or our services.
• Technical Data: IP address, browser type, and browsing behaviour on our site for analytical and security purposes.

We do not collect special categories of personal data (such as information about health or ethnicity) unless you voluntarily provide such information for specific purposes, such as tailoring a bouquet for a particular occasion.

Lawful Basis for Processing Data

Greenwich Florist processes your personal data only when we have a lawful basis to do so. These include:

• Contractual Necessity: To process and fulfil your orders and deliver services you have requested.
• Legal Obligation: To comply with applicable law and tax regulations.
• Legitimate Interests: To manage and improve our business and services (for example, analysing customer feedback), always balanced against your rights and interests.
• Consent: When you explicitly consent to receive marketing updates or promotional offers (you can withdraw this consent at any time).

We will not use your personal data for unrelated purposes without your knowledge or consent unless required by law.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, order data and customer records are retained for up to 7 years, in line with financial regulations. Data used for marketing purposes is retained until you opt out or request deletion.

Once your data is no longer required, it will be securely deleted or anonymised so it can no longer be associated with you. Payment card details are never stored after the transaction is complete, as these are handled directly by our payment processors.

Data Processors

To provide our services efficiently, we use carefully selected third-party service providers (data processors) who may process your data on our behalf:

• Payment Service Providers: Handle card transactions securely and ensure PCI DSS compliance.
• Courier and Delivery Services: Receive necessary contact and delivery details to fulfil your order.
• IT Support and Website Hosting Providers: Host and maintain our website and related digital infrastructure.
• Marketing Platforms (if you have opted in): Distribute email or SMS updates and offers.

All third-party providers are contractually required to adhere to GDPR standards, keep your data confidential, and only process it according to our instructions.

How We Protect Your Data

Greenwich Florist implements a variety of security measures to protect your data, including encryption, access controls, and secure physical storage where appropriate. Our staff are trained in data protection, and regular audits are carried out to ensure ongoing security of information.

Your Data Protection Rights

Under the GDPR, you have a range of rights regarding your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You may ask us to delete your personal data where there is no good reason for us to keep it.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Object: You can object to our processing of your data where we are relying on legitimate interests or direct marketing.
• Right to Data Portability: You can request that we provide your data in a commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

Requests to exercise any of these rights will be responded to promptly and in accordance with applicable laws.

International Data Transfers

Your data is primarily processed within the UK and European Economic Area (EEA). If it is necessary to transfer your data outside these regions, we ensure that appropriate safeguards are in place, such as standard contractual clauses, to ensure the security and legality of your information.

Updates to This Privacy Policy

Greenwich Florist may update this Privacy Policy from time to time to reflect changes in the law, our practices, or our services. The latest version will always be available on our website. Significant changes will be brought to your attention where appropriate.

Contacting Us

If you have any questions about this policy, your rights, or the way we manage your personal data, please get in touch with us through our official contact forms or by post to our shop address in Greenwich. We are committed to handling all enquiries promptly and in accordance with GDPR requirements.