Florist Ealing Privacy Policy for Customers in Ealing and Surrounding Districts

Introduction

This Privacy Policy explains how Florist Ealing collects, uses, retains, and safeguards your personal data when you place an order with us as a customer from Ealing and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring that your privacy is protected.

Scope of This Policy

This policy applies to all individuals who place flower orders with Florist Ealing for delivery or collection within Ealing and its nearby districts. It does not extend to other websites, services, or any activities outside our direct control.

What Data We Collect

To fulfil your order and provide our services, Florist Ealing may collect the following categories of personal data:

• Identity Data: Your name, and in some cases, the name of the recipient.
• Contact Data: Delivery address, billing address, phone number, and any message included with your order.
• Payment Data: Payment details needed to process your purchase (processed via secure payment processors; we do not store full card details).
• Order Data: Details of florist products ordered, delivery date and instructions, and any notes you provide.
• Technical Data: IP address, device type, and browser identifier (collected when you place an order using our online platform for security, analytic and fraud prevention purposes).

Lawful Basis for Processing

We process your personal data under one or more of the following lawful bases, as defined in Article 6 of the GDPR:

• Contract: The processing is necessary for us to fulfil your order and our contract with you, including delivering your flowers and contacting you about the order.
• Legal Obligation: We may be required to retain some information to comply with legal, tax, or accounting obligations.
• Legitimate Interests: For example, to prevent fraud, to improve our services, or to respond to your customer service queries. Such processing will not override your rights and freedoms.
• Consent: Where you have explicitly agreed, for example, to receive marketing from us. You may withdraw consent at any time.

How We Use Your Personal Data

Your data is used only for the purposes for which it was collected. These purposes include:

• Processing and delivering your orders
• Managing payments, fees, and charges
• Contacting you in connection with your order
• Responding to your enquiries or complaints
• Meeting our legal and regulatory obligations
• Improving our websites and services

Who Processes Your Data (Processors and Sharing)

To provide our services, we may share your personal data with trusted third-party processors, strictly as necessary. These may include:

• Payment processors: For handling your payment securely (e.g., card payment gateways). We do not store your payment card numbers.
• Delivery and logistics partners: Who deliver the flowers on our behalf.
• IT and technical support providers: Who help us to host, operate, and maintain our order system and website.
• Professional advisors: Such as accountants or legal counsel, where necessary for compliance or to protect our business.

All our processors are required to keep your data secure and to use it only for the purposes we specify. We do not sell or share your data for marketing purposes with third parties outside these categories.

Data Retention

We retain your personal data only as long as required for the purposes it was collected, or to comply with legal, accounting, or reporting obligations. Typically, order, payment and contact details are kept for a minimum of six years to satisfy accounting and tax record-keeping requirements. After this period, your personal information is securely deleted or anonymised.

Data Security

Florist Ealing implements technical and organisational measures designed to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. These measures include limited access to your personal data, secure order systems, and staff training in data protection. In the unlikely event of a data breach, we will follow applicable legal processes and notify relevant authorities where required.

Your Rights Under GDPR

As a data subject, you have specific rights under UK and EU data protection law. These rights include:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data when it is no longer needed or where processing has been based on your consent.
• Right to Restrict Processing: In certain circumstances, you can ask us to restrict how we use your data.
• Right to Data Portability: Ask us to transfer your data to another provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time where processing relies on consent.

To exercise any of these rights, you may contact us using the contact details provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how your data is being handled.

Updates to This Policy

This Privacy Policy may be updated to reflect changes in law, our practices, or the features of our services. We will display the latest policy on our website, and where appropriate, notify customers of significant changes.

Contacting Florist Ealing

If you have questions about this Privacy Policy or about how your personal data is handled at Florist Ealing, please refer to our website’s contact page for ways to reach us.