Tooting Bec Florist Privacy Policy

Privacy Policy for Tooting Bec Florist Customers

This Privacy Policy describes how Tooting Bec Florist ("we", "us", or "our") collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Tooting Bec Florist from Tooting Bec and the surrounding districts.

What Data We Collect

We collect and process various types of personal data to provide our services effectively. Depending on the nature of your interaction with us, the data we collect may include:

• Identity Data: Your name, title.
• Contact Data: Delivery address, billing address, phone number (if provided), and postal code.
• Order Information: Details of the floral products or gifts you order, any specific messages to accompany your order, and details of recipients (name, address).
• Transaction Data: Information regarding the payment for your order. Note: Payment card details are processed securely by our payment processor and not stored on our systems.
• Communication Data: Correspondence between you and Tooting Bec Florist, including order confirmations, delivery updates, and after-care communications.
• Technical Data: When you visit our website, limited information such as your IP address and browser type may be collected for analytics and website functionality purposes.

Lawful Basis for Data Processing

Under GDPR, we process your personal data only where there is a lawful basis to do so. The key bases we rely on are:

• Performance of a Contract: Processing is necessary to fulfil the purchase contract when you place an order with us (for example, to deliver flowers to you or your chosen recipient).
• Legal Obligation: On occasion, we may process your data to satisfy legal or regulatory obligations (such as tax or accounting requirements).
• Legitimate Interest: We may process your data when it is in our legitimate interests to do so, such as for customer service, direct marketing communications (where permitted), or operational analysis, provided this does not override your fundamental rights.
• Consent: Where we are required to collect and use your data with your explicit consent, we will request this clearly (e.g., for optional marketing communications). You may withdraw your consent at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

• Processing and fulfilling your order, including delivery and customer support.
• Communicating with you regarding your orders or inquiries.
• Handling payments and refunds.
• Improving our services and user experience.
• Complying with legal and regulatory obligations.
• Sending you relevant news or offers, where permitted or with your consent.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. This typically means:

• Order Data: Retained for up to 7 years to satisfy statutory record-keeping obligations and to handle any queries or complaints.
• Marketing Data: Held only for as long as you consent to receiving such communications.
• Technical Data: Retained for a maximum of 24 months for analytics.

After these periods, personal data will be securely deleted or anonymised so that it can no longer be associated with you.

Data Processors and Sharing Your Data

Where necessary, we may share your data with trusted third-party service providers acting as data processors for activities such as:

• Payment processing
• Delivery and courier services
• IT hosting and maintenance
• Website analytics and customer management

These service providers are contractually obliged to handle your data in accordance with GDPR requirements, to use it solely for specified purposes, and to keep it secure and confidential at all times. We do not sell your data to third parties or use it for unrelated purposes.

Your data may also be shared with regulatory authorities if legally required to do so.

International Data Transfers

Your personal data is generally processed within the UK or European Economic Area (EEA). If we ever transfer your data outside of these regions, appropriate safeguards will be implemented in line with GDPR requirements to ensure your data remains protected.

Security Measures

We take the security of your data seriously. Technical and organisational measures are in place to prevent unauthorised access, alteration, disclosure, or destruction of your data. These include secure storage solutions, restricted access to personal data, staff training, and regular review of our cyber security practices.

Your Rights Under GDPR

You have rights regarding the personal data we hold about you, including:

• Right to Access: You can request a copy of your personal data held by us.
• Right to Rectification: You may ask us to correct inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you can request your data to be deleted.
• Right to Restrict Processing: You can ask for us to suspend processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive data you have provided to us in a structured, commonly used format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where you have provided consent, you may withdraw this at any time.

To exercise any of these rights or if you have any questions about how your data is handled, please contact us using our standard communication channels.

Changes to This Privacy Policy

From time to time, we may update this Privacy Policy to reflect changes in legal, regulatory, or operational requirements. We encourage all customers placing orders with Tooting Bec Florist in Tooting Bec and surrounding districts to review this policy periodically for any updates. Continued use of our services after policy updates will constitute your acceptance of those changes.

Contact and Complaints

If you have any questions about this Privacy Policy or how we process your data, please reach out via our published contact methods. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection supervisory authority.

Thank you for trusting Tooting Bec Florist with your personal data. We are committed to protecting your privacy and providing you with the best possible service.