Vauxhall Florist Privacy Policy Overview

Introduction

This Privacy Policy explains how Vauxhall Florist (‘we’, ‘our’, or ‘us’) collects, uses, stores, and protects your personal data when you place orders with us from Vauxhall and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring your privacy is safeguarded throughout your experience with us.

Applicability of this Privacy Policy

This policy applies to all customers placing orders with Vauxhall Florist, whether through our website, over the phone, or at our retail location, specifically serving Vauxhall and neighbouring areas. By using our services, you acknowledge and consent to the practices described in this Privacy Policy.

What Data We Collect

We collect only data necessary to fulfill your floral orders and enhance your customer experience. The personal data we may collect includes:

• Contact Information: Name, postal address, delivery address, phone number (for delivery and order status), and, where provided, your email address.
• Order Information: Details of products ordered, requested delivery dates, card messages, and any specific instructions related to your orders.
• Payment Details: Depending on payment method, we may process card details or payment confirmations. (Note: Where payments are made through third-party providers, your card details may not be stored with us.)
• Recipient Information: If you provide delivery details for recipients other than yourself, we collect recipient names, addresses, and contact numbers solely for delivery purposes.
• Communications: Copies of any correspondence you have with us, such as emails or any communications related to customer service or complaints.
• Technical Data: IP address, browser type, device type, and cookies where applicable and with your consent, for security and improvement purposes.

Lawful Basis for Processing Data

We process your personal data only when we have a lawful basis to do so under GDPR:

• Contractual Necessity: Most of the information we collect is necessary for fulfilling the contract (processing and delivering your order).
• Legitimate Interests: To manage operations, improve services, respond to queries, and protect against fraud, always ensuring these interests are not overridden by your rights.
• Legal Obligation: Where we are required under law to retain or disclose certain information, such as for tax or accounting purposes.
• Consent: For optional activities like sending marketing communications, we request your explicit consent. You may withdraw consent at any time.

How We Use Your Information

Your personal data is used only for the following purposes:

• To process and deliver your floral orders
• To handle payments and refunds
• To communicate with you regarding your orders, deliveries, or requests
• To comply with legal obligations and for accounting purposes
• To send, where you consent, marketing or promotional messages
• To enhance website user experience through analytical data (with your consent)

Retention of Your Data

We retain your personal data only as long as is necessary for the purposes for which it was collected or as required by law. Typically, order and transaction data are retained for up to seven years to comply with tax and accounting regulations. Contact and communication data may be stored for up to two years following your last interaction with us unless you request erasure sooner, provided retention is not mandated for legal reasons. Marketing preferences are maintained until you opt out or withdraw consent.

Sharing Data with Third Parties (Processors)

We may share your personal data with trusted third-party service providers (‘processors’) when necessary for the operation of our business. Examples include:

• Payment Processors: To securely handle card payments. We do not store your full payment details.
• Delivery Partners: For arranging delivery of your orders.
• IT Service Providers: For hosting our website and managing secure storage of data.

All processors are carefully selected, bound by confidentiality, and under contract to use your data solely as instructed by us for the intended purpose. Personal data will not be sold or shared for unrelated marketing activities. If required by law, we may disclose data to governmental authorities.

Your Rights under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data held by us.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data where it is no longer necessary for the purpose collected, unless required for legal compliance.
• Right to Restrict Processing: Request that we restrict how we use your data.
• Right to Data Portability: Request to receive data you have provided in a structured, commonly used format or ask for it to be transferred directly to another controller.
• Right to Object: Object to processing carried out in our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us by using the communication channels available on our website or at our store premises. We may require you to verify your identity before responding to such requests.

Data Security

We employ suitable technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These include secure data storage, encrypted channels for payment and communication, and access controls. Despite our best efforts, no method of transmission or storage is completely secure; however, we are committed to responding promptly in the unlikely event of any data breach.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect regulatory changes or enhancements to our services. Any changes will be effective as of the date published on our website or made available in our store. We encourage you to review this policy periodically.

Contact and Complaints

If you have any concerns regarding how your information is handled, please get in touch with us using the available contact methods on our website or at our retail location. You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.