Beckton Florist GDPR Privacy Policy

Introduction

At Beckton Florist, we are committed to protecting the confidentiality and security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data in accordance with the UK General Data Protection Regulation (GDPR). It applies to all individuals placing orders with Beckton Florist from Beckton and surrounding districts.

What Personal Data We Collect

When you place an order or interact with our business, we may collect the following categories of personal data:

• Identification Information: Your name, delivery recipient name.
• Contact Details: Address, postcode, and in some cases, telephone number for delivery purposes.
• Order Information: Details of products ordered, delivery instructions, and relevant dates (e.g., delivery date).
• Payment Information: Payment confirmation details (such as payment method and transaction details). Please note that we do not store full payment card numbers, which are handled via our selected payment processors.
• Correspondence: Any communications sent to us via forms, notes attached to orders, or other interactions with our team.
• Technical Data: Where relevant, your device’s IP address and browser type for security and troubleshooting.

Lawful Basis for Data Processing

Under the GDPR, we rely on several lawful bases to process your data:

• Contractual Necessity: To process and deliver your order, including fulfilling delivery, payment, and customer service obligations.
• Legal Obligation: To meet accounting, tax, and regulatory requirements.
• Legitimate Interests: To improve our products and services, manage enquiries, and resolve issues with orders.
• Consent: In rare circumstances, with your explicit permission, for specific uses not outlined above. Where consent is the lawful basis, you may withdraw it at any time.

How We Use Your Data

We use your personal data solely to:

• Process and fulfil your orders, including managing deliveries and handling any enquiries regarding your purchase.
• Communicate with you regarding your order status or issues requiring clarification.
• Comply with legal and regulatory obligations related to record-keeping and reporting.
• Monitor and improve our services for customers in Beckton and the surrounding districts.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. Typically, order information is retained for up to seven years as required for accounting and tax purposes. After this period, data is securely deleted or anonymised. Correspondence regarding non-order queries may be retained up to one year for administrative purposes. If you request data erasure and there is no overriding legal basis for retention, we will comply promptly.

Use of Data Processors

We may share your information with carefully selected third-party processors solely for the purpose of delivering our services. These include:

• Payment Service Providers: To securely process payments (we do not access full card numbers).
• Delivery and Courier Services: For arranging deliveries to your specified address.
• IT and Technical Support Providers: Who maintain and host our ordering systems and databases.

All processors are obligated under contract to comply with GDPR and only process your data according to our instructions. We do not sell or rent your personal data to any third party.

Security Measures

We implement appropriate technical and organisational measures to safeguard your information, including secure order systems, access controls, and staff training. Paper records, if any, are stored securely and destroyed by shredding once retention periods expire. Digital data is held in secure, password-protected systems with restricted access.

Your Rights as a Data Subject

Under GDPR, you have a range of rights concerning your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Ask us to delete your data when it is no longer needed, subject to legal requirements.
• Right to Restriction: Request a halt to processing your data under certain circumstances.
• Right to Data Portability: Obtain your data in a commonly-used format for transfer to another provider.
• Right to Object: Object to direct marketing or to processing carried out based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of your rights, please contact us using the contact details available in our store or via the methods provided when placing your order. We may request proof of identity to protect your privacy.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect the personal data of children for order processing without parental consent.

Updates to This Policy

We may update this Privacy Policy when required to reflect changes in our processes or legal obligations. The latest revision date will appear at the bottom of this policy. Please review periodically for any updates, particularly if placing new orders with us.

Further Information

If you have questions or concerns about how we handle your personal data, or if you wish to make a complaint, please get in touch by visiting our store or referring to the contact methods provided upon order placement. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data rights have been breached.

Policy last updated: June 2024