Florist Old Malden Privacy Policy
Introduction
This Privacy Policy explains how Florist Old Malden collects, processes, stores, and protects your personal information when you place an order with us. By placing an order from Old Malden and the surrounding districts, you acknowledge and accept the terms outlined in this policy. We are committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR).
Scope of This Policy
This Privacy Policy applies to all customers using Florist Old Malden’s services from Old Malden and nearby districts. It includes any interaction with us online, in person, or by phone relating to orders, deliveries, and customer service.
What Personal Data We Collect
When you place an order or interact with Florist Old Malden, we may collect the following categories of personal data:
- Identification Data: Full name, title, and, if applicable, company name (for corporate orders).
- Contact Data: Delivery address, billing address, telephone number, and postal code.
- Order Details: Items purchased, delivery instructions, order history, and any message text for card inscriptions.
- Payment Data: Payment card details (handled securely and in compliance with payment industry standards), payment confirmation codes, and transaction references.
- Communication Data: Correspondence with our customer support team or requests made via our order form or telephone.
- Technical Data: IP address, device type, browser type, and operating system (when using our website), collected via standard web server logs and cookies.
Lawful Basis for Processing Personal Data
Florist Old Malden processes your personal data under the following lawful bases, as defined in Article 6 of the GDPR:
- Contractual necessity: We require certain information to process and deliver your order, communicate with you about your purchase, and handle payment and refunds.
- Legal obligation: In some circumstances, we are required by law to retain transaction data, such as for tax or accounting records.
- Legitimate interests: We process your data to improve our services, prevent fraud, or defend our legal rights, provided such activities do not override your rights and freedoms.
- Consent: If we wish to send you marketing communications (such as special offers or newsletters), we will request your explicit consent, which you are free to withdraw at any time.
How We Use Your Data
Your personal information is used strictly for purposes related to your relationship with Florist Old Malden. This includes:
- Processing and fulfilling your flower orders
- Communicating order confirmations, delivery updates, and customer support messages
- Handling payments, refunds, and invoicing
- Resolving customer service issues or complaints
- Improving our products, services, and user experience
- Complying with legal and regulatory requirements
Sharing and Processing Data with Third Parties
Florist Old Malden may share your information with trusted third-party service providers (“data processors”) only where necessary to perform services on our behalf, such as:
- Payment processing providers for secure transaction handling
- Delivery and courier partners to ensure timely fulfillment of your orders
- IT service providers for maintaining our website and data security systems
- Bookkeeping and accountancy services for financial records
All third-party processors are carefully vetted and required to comply with GDPR obligations for data security and confidentiality. We do not sell or transfer your personal data to external parties for marketing or unrelated purposes.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes it was collected for, including for satisfying any legal, accounting, or reporting requirements. Generally:
- Order and transaction details are retained for up to 7 years in keeping with relevant tax laws and financial regulations.
- Customer correspondence is kept for up to 2 years to facilitate service follow-ups or resolve ongoing matters.
- Technical data from website visits may be retained for up to 1 year for performance and security analysis.
After these periods, your personal data is securely deleted or anonymised so you cannot be identified from it.
Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of access: To request confirmation of whether we hold data about you and to obtain a copy of it.
- Right to rectification: To request correction of inaccurate or incomplete information.
- Right to erasure (“right to be forgotten”): To ask us to delete your data in certain cases, such as when it is no longer needed for its original purpose or if you withdraw your consent.
- Right to restrict processing: To request that we limit processing of your data where appropriate.
- Right to data portability: To receive personal data you have provided to us in a structured format or to ask us to send it to another data controller.
- Right to object: To object to processing of your data where we base such processing on legitimate interests, or to opt out of direct marketing at any time.
- Right to withdraw consent: Where we rely on your consent to process data (for example, for marketing), you can withdraw this consent at any time.
To exercise any of these rights, or if you have questions regarding your data, you may contact us directly. We will respond to your request in accordance with GDPR requirements, usually within one month.
How We Protect Your Data
Florist Old Malden takes the security of your personal data seriously. We employ a combination of physical, electronic, and procedural safeguards to keep your data safe against loss, theft, unauthorised access, or disclosure. This includes encryption of payment data, secure storage practices, and ongoing training for staff who handle personal information.
Changes to This Privacy Policy
We may amend this Privacy Policy to reflect changes in the law, technology, or our business practices. If significant changes are made, we will notify you when you next use our services. The updated policy will always be available on request and will state the date of the latest revision.
Contacting Florist Old Malden
If you have any questions or concerns about how we manage your privacy or wish to exercise your data rights, please contact us directly and our designated data protection representative will respond accordingly.
