Croydon Florist Data Privacy Notice

Name: SPARKLING EYES
Brand: Croydon Florist
Price: 50.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Croydon Florist ("we", "our", or "us") collects, uses, and protects your personal data when you place floral orders as a customer in Croydon or surrounding districts. We are committed to ensuring your privacy and comply with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Who Does This Policy Apply To?

This Privacy Policy applies to all individuals who purchase, order, or enquire about floral products and associated services from Croydon Florist, primarily located in Croydon and its neighbouring districts. It covers both direct customers and recipients where relevant personal data is provided by the customer.

What Personal Data Do We Collect?

We only collect data that is necessary to fulfil your order and provide customer service. The personal data we may collect includes:

Identity Information: Your name (and name of recipient, where applicable).
Contact Information: Address, phone number, and (if provided during order) email address relevant to delivery and communication about your order.
Order Details: Any specific delivery instructions, requested messages for cards, and product preferences.
Payment Information: Payment method details processed by our secure payment processors (please note: we do not store card details on our own systems).
Correspondence: Information you voluntarily provide in communications with us, for example, queries, customer support requests, or special delivery arrangements.

Lawful Basis for Processing Your Data

Under GDPR, we must have a legal basis for collecting and processing your data. Our primary lawful bases are:

Contract: We process your data for the purpose of fulfilling your order and delivering products as per our terms of service.
Legal Obligation: We may process data to comply with applicable laws (e.g., tax record keeping).
Legitimate Interests: We may occasionally use personal data for internal analytics, direct customer service follow-up, or improvement of our services, provided this does not override your rights and interests.
Consent: Where required (such as for direct marketing communications), we will seek your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

We use your personal data to:

Process and deliver your orders, including communicating order status or delivery issues.
Manage customer accounts where applicable.
Handle queries, after-sales support, or customer feedback.
Meet our legal and accounting obligations.
Analyse and improve our products and services (using anonymised or aggregated data when possible).

Sharing and Data Processors

Your data is processed primarily by Croydon Florist staff. We only share your personal data with trusted service providers to the extent necessary to conduct our business:

Payment Processors: To securely process card or electronic payments.
Delivery Partners: If we use local couriers or delivery services, we share recipient details strictly for delivery purposes.
IT and Communications Providers: For operating our website, order management, and customer communications where secure platforms or third-party tools are used.
Accountancy Services: To comply with tax and business record-keeping obligations.

Where third-party processors are involved, we require them to handle your data in accordance with GDPR standards, under contractual agreements specifying confidentiality and data protection measures.

How Long Do We Keep Your Data?

We retain your personal data only for as long as necessary:

Order Information: Retained for up to 7 years to comply with legal, contractual, and accountancy requirements.
Customer Correspondence: Kept for 2 years after the resolution of a query or complaint, unless longer retention is legally required.
Marketing Preferences: Maintained until you withdraw consent or unsubscribe.

Once data is no longer needed, it is securely deleted or anonymised.

Your Rights Under GDPR

GDPR grants you various rights concerning your personal data held by us, including:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete data.
Right to Erasure: You can ask us to delete your data, subject to legal retention obligations.
Right to Restrict Processing: In some situations, you can restrict how your data is used.
Right to Data Portability: You can request your data be provided in a machine-readable format for transfer to another provider.
Right to Object: You may object to certain types of processing, such as direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time.
Right to Lodge a Complaint: You can lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.

How Do We Keep Your Data Secure?

We use appropriate technical and organisational measures to protect your personal data against accidental or unlawful loss, access, or disclosure. This includes secure servers, data encryption, staff confidentiality training, and limiting access to personal data only to those who need it.

Updates to This Policy

We may update this Privacy Policy from time to time in line with changes to the law or our processing practices. Any substantial changes will be made visible in this policy and the effective date will be updated at the top of the notice. We recommend checking this page regularly to stay informed about our privacy practices.

Contacting Us

If you have questions about this Privacy Policy or your personal data, please contact us through our official website enquiry form or visit us in person at our Croydon premises during business hours.