How Florist Wealdstone Handles Your Personal Data

Florist Wealdstone Privacy Policy Overview

Introduction

This Privacy Policy explains how Florist Wealdstone collects, uses, shares, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). This information is provided to our customers who place orders with Florist Wealdstone from Wealdstone and the surrounding districts. Our aim is to give you transparent information about your data and your rights concerning its use.

What Personal Data We Collect

When you interact with Florist Wealdstone, we collect several categories of personal information, depending on the services you use. The following personal data may be collected:

Identity Data: Name, surname, and, if relevant, delivery recipient details.
Contact Data: Delivery address, billing address, telephone number, and payment confirmation details.
Order Information: Details about your order, order history, and any special delivery instructions.
Correspondence: Records of your communications with us, whether by contact forms, letters, or during order processing.
Device or Access Data: Technical information such as your IP address, browser type and version, device identifiers, and usage data if you visit our website.

Lawful Basis for Processing

Florist Wealdstone processes your personal data in accordance with Article 6 of the GDPR. The lawful bases under which we process your data are:

Contractual Necessity: To fulfil and manage your flower and gift orders, and to provide requested customer service. Without this information, we cannot deliver the goods you purchase.
Legal Obligation: To comply with UK tax, finance, and accounting laws, which require us to keep certain records.
Legitimate Interests: To provide, improve, and secure our services, prevent fraud, or send communications regarding order status. We ensure your rights and interests are balanced before relying on this basis.
Consent: For any marketing communications where you have provided explicit consent (if applicable). You can withdraw your consent at any time.

How We Use Your Data

Your data is used solely for the purposes outlined below:

To process and deliver your orders, including handling payments and arranging deliveries.
To communicate with you about your orders, requests, or to answer your inquiries.
To comply with mandatory legal, tax, and regulatory obligations.
If consented, to send you promotional or marketing materials relating to Florist Wealdstone’s services.
To ensure website security and improve user experience (if you use our digital services).

How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes for which it was collected, including for the fulfilment of your order, compliance with legal and accounting obligations, or for as long as you maintain a customer account with us. Generally:

Order and transactional data are kept for seven years to comply with UK tax laws.
Customer correspondence and service records are typically kept for up to two years after your last interaction.
Marketing consent data (where relevant and given) is deleted or anonymised when you withdraw your consent.

Sharing and Data Processors

Your personal information may be shared with carefully selected third-party service providers ("processors") which process data on behalf of Florist Wealdstone. These processors help us provide services and process your orders efficiently. Typical examples include:

Payment processing companies to manage card and other payment transactions.
Delivery and logistics providers for order fulfilment.
IT and system support providers to safeguard and operate our website and IT infrastructure.

We ensure that all data processors acting on our behalf are GDPR-compliant, only process your data according to Florist Wealdstone’s strict instructions, and will not use your personal data for any purposes other than those specified by us. Data is never sold to third parties for marketing or for any commercial reason outside order fulfilment and related operations.

Your Rights Under the GDPR

As a data subject, you have important rights in relation to your personal information. These include:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure: In certain circumstances, you can request the deletion of your data.
Right to Restrict Processing: You can ask us to pause or restrict the use of your data in certain circumstances.
Right to Data Portability: You can request to receive your data or have it transferred to another provider.
Right to Object: You may object to certain types of processing, such as direct marketing.
Right to Withdraw Consent: If processing is based on your consent, you may withdraw it at any time.

If you wish to exercise any of your rights, please contact us using the methods listed in our customer communications or request forms.

Data Security

Florist Wealdstone employs appropriate technical and organisational measures to ensure the security, integrity, and confidentiality of your personal data. This includes encryption, access controls, and regular evaluation of our IT systems and processes to prevent unauthorised access or breaches. In case of a data breach that presents a risk to your rights and freedoms, we will notify you and the relevant authorities in line with GDPR requirements.

Updates to This Policy

This Privacy Policy may be updated from time to time to reflect legal, regulatory, or service changes. Updated versions will always be available to our customers. Please review this policy periodically.

Who This Policy Applies To

This policy applies specifically to all customers who place orders with Florist Wealdstone from Wealdstone, as well as those residing in or requesting deliveries to nearby districts. By placing your order, you acknowledge and agree to the collection and use of your data as described in this policy.

Contacting Florist Wealdstone about Privacy

If you have questions regarding how we handle your personal data, how to exercise your GDPR rights, or wish for further details on our practices, please reach out to us using the contact methods provided in your order confirmation or through our official communication channels. We are committed to protecting your privacy and responding promptly to all requests relating to your data.