Ilford Florist Customer Data Privacy Policy
Scope of this Privacy Policy
This Privacy Policy outlines how Ilford Florist processes, stores, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Ilford Florist from Ilford and surrounding districts, irrespective of whether orders are made online, via telephone, or in person.
Personal Data We Collect
When you place an order with Ilford Florist, we may collect and process the following categories of personal data:
- Identity details: Full name, delivery recipient's name, and, if asked, the relation to the recipient.
- Contact details: Billing and delivery address, telephone number, and any other contact information provided.
- Transactional data: Details about your purchases, delivery instructions, order notes, and payment status.
- Payment information: Payment card details or bank transaction details (processed securely via our payment providers, not stored by us directly).
- Communications: Any communications you have with us, including email correspondence and special instructions.
- Technical information: IP addresses, browser type, and other technical data necessary for website functionality and security (if ordering online).
Our Lawful Bases for Processing Personal Data
Ilford Florist processes your personal information only when we have a legal basis for doing so under the GDPR. Our lawful bases include:
- Contractual Necessity: Processing is required to fulfill your order, manage payment, and deliver products to your specified address.
- Legal Obligation: We process data as necessary to comply with legal and regulatory requirements, such as tax and accounting rules.
- Legitimate Interests: We may process your data for our legitimate business interests (e.g., responding to customer services queries, improving our services, fraud prevention), provided your rights do not override these interests.
- Consent: Where required, we will obtain your consent, for example before sending marketing communications or using optional cookies online.
Purposes of Processing
Your personal data is used for the following purposes:
- To process, manage, and complete your flower orders.
- To deliver products to the correct recipient, on time and to your instructions.
- To provide you with customer support and respond to your enquiries.
- To handle payment and prevent or detect fraud.
- To fulfil our legal and tax obligations.
- To enhance and personalise the customer experience if using our website or digital ordering tools.
How We Share Your Personal Data
Ilford Florist respects your privacy and does not sell or rent your data to third parties. We may share your information with third parties only when required to deliver our services or comply with the law:
- Service Providers and Processors: Payment processors, courier and delivery partners, IT service providers, and providers of order management systems. Each third-party processor is contractually obliged to safeguard personal data and process it only as instructed.
- Legal Authorities: When required to comply with the law or regulatory requirements, we may disclose information to authorities or regulators.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:
- Order and transaction data: Retained for up to 6 years to comply with legal and tax obligations.
- Communication records (including customer support): Retained for up to 2 years unless we need to keep them longer for ongoing matters.
- Marketing consent records: Retained until you withdraw your consent or ask us to stop processing for these purposes.
- Technical and website usage data: Retained for up to 1 year for security, analysis, and website improvement.
When your data is no longer needed, it will be securely deleted or anonymised.
Your Rights Under GDPR
As a customer within the GDPR zone, you have the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Ask us to delete your data under certain circumstances.
- Right to restrict processing: Ask us to temporarily restrict the processing of your data in specific situations.
- Right to data portability: Obtain and reuse your data for your own purposes across different services.
- Right to object: Object to our processing of your data when we rely on legitimate interests or for direct marketing.
- Right to withdraw consent: Where we process your data based on consent, you may withdraw your consent at any time.
If you wish to exercise any of your rights, please contact us. We will respond to your requests in accordance with GDPR requirements and timeframes.
Security of Your Data
We implement appropriate technical and organisational measures to ensure the security, confidentiality, and integrity of your personal data. All payment information is processed securely using encrypted methods by our payment processors, and only authorised personnel have access to personal data to fulfil your orders and assist you.
International Transfers
Your data is generally processed within the United Kingdom or European Economic Area (EEA). Where we must transfer personal data outside these jurisdictions (for example, if a service provider operates elsewhere), we ensure appropriate safeguards are in place to protect your privacy in accordance with GDPR requirements.
Changes to This Policy
Ilford Florist may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage customers to review this page periodically to remain informed about how we protect your information.
How to Contact Us
If you have any questions or concerns about this Privacy Policy or the way your data is processed, please reach out to us through the contact options provided on our website or at our shop premises. We are committed to safeguarding your privacy and ensuring your rights are respected.