Privacy Policy for Florist Malden Rushett Customers

Introduction

At Florist Malden Rushett, we are committed to safeguarding your personal data and ensuring your privacy is protected. This Privacy Policy outlines how we collect, use, store, and process your information when you place an order with us from Malden Rushett and surrounding districts. We strive to ensure compliance with the General Data Protection Regulation (GDPR). Please take a moment to review our privacy practices and your rights as a valued customer.

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Florist Malden Rushett, whether through our website, in person, or over the phone, and who reside in Malden Rushett and its surrounding districts. By placing an order, you acknowledge the terms set out in this policy.

What Data We Collect

When you interact with Florist Malden Rushett and place an order, we may collect and process the following categories of personal data:

  • Identity Data: Your full name.
  • Contact Data: Address, delivery address (if different), and contact number.
  • Order Data: Details of your order, preferences, and, if providing flowers as a gift, recipient details including name and delivery address.
  • Payment Data: Transaction details (note: we do not store your full payment card details; these are securely handled by our payment service provider).
  • Correspondence: Any communication with us, including queries, feedback, or complaints.

We do not intentionally collect special category data (e.g., health or religious information) or information about children; if you believe we have unintentionally collected such data, please contact us to request its removal.

Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful basis to process your personal data. We process your personal information on one or more of the following bases:

  • Contractual necessity: When processing your order, delivering products, and fulfilling the contract between you and Florist Malden Rushett.
  • Legal obligation: To comply with applicable laws and regulatory requirements (e.g., record keeping for tax purposes).
  • Legitimate interests: To communicate with you regarding your orders, improve our products and services, and where necessary, for fraud prevention and security purposes (provided your rights and freedoms do not override our interests).
  • Consent: Where you have explicitly consented, for example, to receive marketing communications. You may withdraw consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

  • To process and fulfill your order, including delivery of flowers and related products.
  • To communicate with you about your order (confirmation, updates, queries).
  • To manage queries, complaints, or feedback to improve customer satisfaction.
  • To comply with legal or regulatory obligations.
  • If you have given us explicit consent, to send you updates, special offers, or information about our services.

How We Share and Disclose Your Data

Florist Malden Rushett treats your personal information with care and confidentiality. We do not sell your information for marketing purposes. In certain instances, we may share your data with trusted third parties, such as:

  • Payment service providers to process your transaction securely.
  • Delivery partners to ensure your order reaches its intended recipient.
  • IT and system administration service providers who maintain our website and communication systems.
  • Legal, accountancy, or regulatory bodies as required by law.

All third-party processors are vetted to ensure they comply with GDPR regulations and process your data only for specified purposes on our instructions.

Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, customer order and transaction details are retained for up to six years to comply with tax obligations and business record-keeping practices. In most cases, correspondence and order details are retained for no longer than necessary, after which your data is securely deleted or anonymised unless we are required by law to keep it for longer.

Your Rights Under GDPR

As a customer, you have several rights concerning your personal data. These include:

  • Right to access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You can request correction of any inaccurate or incomplete data.
  • Right to erasure: You have the right to request deletion of your personal data where there is no lawful basis for further processing.
  • Right to restrict processing: In certain circumstances, you can request the restriction or suppression of your personal data.
  • Right to data portability: You may request to receive your personal data in a structured, commonly used digital format, or request its transfer to another data controller.
  • Right to object: You may object to processing based on legitimate interests or direct marketing at any time.
  • Right to withdraw consent: If we process data based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details provided with your order or via our customer service channels. We may verify your identity before fulfilling your request and will respond within the timeframe required by law.

Data Security

Florist Malden Rushett is committed to protecting your personal information. We implement physical, electronic, and managerial security measures to safeguard your data and prevent unauthorised access, alteration, disclosure, or destruction.

International Transfers

Your personal data is stored and processed within the United Kingdom. In the unlikely event that data needs to be transferred outside the UK or European Economic Area (EEA), we will ensure adequate safeguards are in place to protect your privacy in accordance with GDPR standards.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or customer feedback. The most recent version will always be available to customers placing orders, and we encourage you to review it regularly.

Contacting Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us via the channels provided with your order or reach out through our published customer service contacts. We are committed to addressing your privacy concerns promptly.