Florist Wapping Privacy Policy
Introduction
This Privacy Policy explains how Florist Wapping (‘we’, ‘our’, ‘us’) processes your personal data when you place an order with us. This policy applies to customers ordering flowers from Wapping and surrounding districts. We are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR).
What Data We Collect
When you place an order, we collect specific personal data necessary to fulfil your purchase and for business administration. The types of data collected include:
- Personal Identification Data: Your full name, address, and contact details (such as phone number where required for delivery), and delivery recipient’s details if different from yours.
- Order Information: Products ordered, purchase date and time, delivery instructions, payment status.
- Payment Information: Payment transaction details (note: we do not store your full payment card details; these are securely processed by our payment processor).
- Communications: Records of correspondence, including any enquiries and feedback submitted through forms or customer support channels.
- Technical Data: Your IP address, browser type, and device information – where necessary for order processing or website security.
Lawful Basis for Processing
Under GDPR, we must have a lawful basis to process your data. Our processing is based on:
- Contract: Much of your data is processed to fulfil your order and manage our service contract with you (Article 6(1)(b) GDPR).
- Legal Obligation: To comply with legal and regulatory requirements such as record keeping and accounting (Article 6(1)(c) GDPR).
- Legitimate Interests: Where necessary, to communicate with customers, improve our service, prevent fraud, and maintain security, provided these interests do not override your rights (Article 6(1)(f) GDPR).
- Consent: Where applicable, for actions such as direct marketing, we will seek your explicit consent (Article 6(1)(a) GDPR), and you have the right to withdraw it at any time.
How We Use Your Data
Your data is used for the following purposes:
- Processing and delivering your flower orders, including communications about delivery status.
- Contacting you about enquiries, feedback, or service updates related to your orders.
- Managing payments, refunds, and invoicing.
- Improving our customer experience and maintaining service quality.
- Complying with our legal and regulatory obligations.
Data Retention
We retain your personal data only for as long as necessary for the purposes stated in this policy or as required by law. For example:
- Order and transaction data is generally retained for six years to meet financial and legal obligations.
- Customer support queries and correspondence may be kept for up to two years to assist with any issues or future orders.
- Where your data is processed based on consent and you withdraw consent or request deletion, we will remove it unless we have a continued lawful reason to keep it.
Our Data Processors
To fulfil our services, we may share your data with third-party service providers (processors) who assist with:
- Payment processing
- Order delivery and logistics
- IT hosting and website operation
- Customer communications
- Accounting and compliance functions
We require all processors to handle your personal data securely and only for the specified purposes, and they are contractually bound to uphold confidentiality and data protection standards in line with GDPR.
Security of Your Data
We take security seriously and use appropriate technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, disclosure, or destruction. This includes encryption, secure data storage, access controls, and staff training on data protection.
Your Rights Under GDPR
You have a range of rights regarding your personal information, including:
- Right to Access: You may request a copy of your personal data we hold.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure: You can request deletion of your data where it is no longer necessary or you have withdrawn consent.
- Right to Restrict Processing: You can request restriction in certain circumstances, such as while a query is being resolved.
- Right to Object: You may object to specific uses of your data, such as marketing, at any time.
- Right to Data Portability: Where applicable, you can ask us to provide your data in a structured, commonly-used format for transfer to another service provider.
- Right to Complain: You have the right to lodge a complaint with a data protection authority if you believe your data is not being handled lawfully.
To exercise these rights or make a data request, please contact us through our usual customer service channels. We may need to verify your identity before responding to requests.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our services. Any changes will be posted on our website and take effect upon publication. Please check back periodically to ensure you remain informed about how we use your data.
Scope and Contact Information
This policy applies to all customers placing Florist Wapping orders from Wapping and its surrounding districts. If you have any questions, concerns, or would like further information about how your personal data is processed, please contact our customer service team.