Cheam Florist Privacy Policy for Cheam and Local Customers
Introduction
At Cheam Florist, we are dedicated to protecting and respecting the privacy of all our customers. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to customers placing orders with Cheam Florist within Cheam and surrounding districts, whether orders are placed online, by phone, or in person.
Personal Data We Collect
When you place an order or interact with Cheam Florist, we may collect various types of personal data, including:
- Identity Data: Name, title, and contact details (such as address and telephone number).
- Order Details: Delivery addresses, preferred delivery dates, product selections, messages/card notes for recipients.
- Payment Information: Details required to process your payments (handled securely through our payment processors, and we do not store your full payment card details).
- Communication Records: Any correspondence with our team, feedback, and queries.
- Technical Data: Information collected via website cookies such as IP address, browser type and version, and device information when you interact online. Cookies are used for essential functioning and analytics purposes.
We do not intentionally collect or process any special categories of personal data (such as health or biometric data) unless explicitly provided for a bespoke request. If you provide such information, it will be processed with additional safeguards and only for the necessary purpose.
Lawful Basis for Processing Your Data
We process your personal data in accordance with the lawful bases as defined by the GDPR:
- Performance of a Contract: To process, fulfil, and deliver your flower orders.
- Legitimate Interests: To improve our services, prevent fraud, ensure security, and manage customer relationships (including responding to feedback or queries).
- Legal Obligation: To fulfil our compliance duties with accounting, tax, and other applicable legislation.
- Consent: Where you have given us permission, for example, to receive marketing communications. You can withdraw your consent at any time.
How We Use Your Personal Data
Cheam Florist uses your personal data for the purposes outlined below:
- Processing customer orders and arranging for timely delivery of products.
- Communicating order confirmations, delivery updates, or responding to your inquiries.
- Fulfilling legal and regulatory requirements.
- Improving user experience and tailoring our products and services.
- Conducting reviews or analysis to enhance business processes (in aggregated or pseudonymised form when possible).
Personal Data Retention
Your personal data will be retained only as long as is necessary to fulfil the original purpose for which it was collected or to comply with legal, regulatory, or accounting requirements. Typically, your data is retained for no longer than six years from the date of your last transaction, unless a longer retention period is required by law. After the relevant period, your data is securely deleted or anonymised unless further retention is required under applicable legislation.
Disclosure and Data Processors
To process your order and operate our business efficiently, your information may be shared with trusted third parties acting as our data processors, including:
- Payment processing providers for secure transaction handling.
- Delivery partners or couriers to ensure timely delivery of floral arrangements.
- IT, web hosting, and analytics service providers who assist with our website and order management systems.
All data processors are subject to strict contractual obligations to ensure your data is protected consistent with this privacy policy and GDPR regulations. Cheam Florist does not sell or rent your personal data to any external parties.
Your Data Protection Rights
As a customer within Cheam or surrounding districts, you have the following rights regarding your personal data as provided under the GDPR:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Correct any inaccurate or incomplete information.
- Right to Erasure: Request deletion of your data, subject to certain criteria and retention requirements.
- Right to Restrict Processing: Request a halt to processing under certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format and transfer it to another provider.
- Right to Object: Object to processing for direct marketing or in specified situations.
- Right to Withdraw Consent: Withdraw any consents you have provided for data processing at any time (without affecting the lawfulness of prior processing).
Should you wish to exercise any of your rights, please contact us using the details provided at the end of this policy. We will respond to your request within one month and may need to verify your identity for security reasons.
Security of Your Data
Cheam Florist implements robust security measures to protect your personal data against unauthorised access, alteration, disclosure, or loss. This includes regular review of security practices, staff training, and the use of secure servers and encryption technologies where appropriate.
International Data Transfers
Cheam Florist primarily stores and processes your data within the UK and European Economic Area (EEA). If it becomes necessary to transfer your data outside of this region, we will ensure appropriate safeguards and contractual protections are in place as required by GDPR.
Policy Changes
This policy may be updated from time to time to reflect changes in legal requirements or business practices. Updates will be published on our website, and we encourage you to review the policy periodically.
Contact and Complaints
If you have any questions about this privacy policy, your rights, or wish to make a complaint about how we process your data, please reach out to our team using the contact information on our website or order paperwork. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are not satisfied with our response.
Thank you for trusting Cheam Florist with your personal data. We are committed to providing beautiful floral arrangements while prioritising your privacy and data security at every step.
