West Heath Florist Privacy Policy

Our Commitment to Your Privacy

West Heath Florist takes your privacy seriously. This Privacy Policy outlines how we collect, use, protect, and manage your personal data in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers who place orders with West Heath Florist, whether you reside in West Heath or the surrounding districts.

What Data We Collect

When you interact with West Heath Florist, either online or in person, we may collect the following types of personal data:

• Contact Information: Full name, delivery address, billing address, phone number (if provided), and any additional contact details necessary to fulfill your order.
• Order Details: Product purchase information, delivery instructions, recipient’s details (where you are ordering on behalf of someone else), and any personalised messages you provide.
• Payment Information: Payment method and transaction details. Note: Payment card information is managed securely by our payment processor and is not stored or accessible by West Heath Florist directly.
• Communications: Any correspondence you have with us, including email exchanges, feedback, or queries regarding your order.
• Technical Data: We may collect non-personal technical details such as IP address, browser type, and device type for security and analytics purposes.

Lawful Basis for Data Processing

West Heath Florist only processes your personal data when there is a lawful basis for doing so under the GDPR. The lawful bases we rely upon include:

• Contract: We process your data to fulfill our contract with you, such as processing your order, arranging delivery, and taking payment.
• Legal Obligation: We may need to retain certain data to comply with tax, accounting, or other legal requirements.
• Legitimate Interests: We process data to improve our services, handle customer queries, and maintain accurate business records, provided such interests do not override your rights and freedoms.
• Consent: Where we use your data for marketing communications, this is based on your explicit consent. You have the right to withdraw this consent at any time.

How We Use Your Information

Your data is used for the following purposes:

• Processing and fulfilling orders, including delivery and order updates.
• Processing payments and issuing invoices or receipts.
• Responding to your inquiries and requests for information.
• Improving our website and services based on feedback and interactions.
• Meeting legal and regulatory requirements.

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy and in accordance with legal and regulatory requirements. Typically, order and transaction records are retained for up to six years to comply with accounting and tax purposes. Other correspondence and personally identifiable data are reviewed regularly and deleted or anonymised when no longer required.

Data Processors and Third Parties

West Heath Florist uses carefully selected third-party service providers (data processors) to assist in delivering our services. These may include:

• Payment Service Providers: To process payments securely.
• IT and Web Hosting Partners: To host and maintain our website, ensuring the security and reliability of our services.
• Delivery Partners: To enable the prompt delivery of your floral orders.

All third-party processors act strictly on our instructions, have appropriate security measures in place, and are contractually bound to uphold your data privacy in accordance with GDPR.

Data Security

The security of your personal information is paramount to us. We implement suitable technical and organisational measures to protect your data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are reviewed and updated regularly to ensure ongoing compliance and effectiveness.

Your Rights under GDPR

As a data subject, you have the following rights regarding your personal data:

• The right to be informed: You have the right to know how your data is collected and used, as outlined in this policy.
• The right of access: You may request a copy of personal data we hold about you.
• The right to rectification: If your information is incomplete or inaccurate, you may ask us to correct it.
• The right to erasure: You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent (where consent was the lawful basis).
• The right to restrict processing: In certain circumstances, you may request that we limit how we process your data.
• The right to data portability: You may request a copy of your data in a commonly used format and transfer it to another provider.
• The right to object: You can object to processing related to direct marketing or where processing is based on our legitimate interests.
• Rights in relation to automated decision-making and profiling: West Heath Florist does not make decisions based solely on automated processing or profiling that produce significant effects.

To exercise any of your rights, please contact us using the details provided on our website or in store. We will respond to all requests promptly and in accordance with applicable law.

Policy Updates and Changes

This Privacy Policy may be updated from time to time to reflect changes in legal, regulatory, or operational requirements. Please refer to the latest version available in store or on our website for the most accurate information.

Policy Scope

This Privacy Policy covers all personal data of customers who place orders with West Heath Florist, including customers from West Heath and its surrounding districts. By placing an order with us, you agree to the terms set out in this policy.

Contacting West Heath Florist

If you have any questions or concerns about how your personal data is handled, or wish to exercise any of your GDPR rights, please reach out to us using the contact methods listed on our official website or visit us in store. Our team is dedicated to ensuring your privacy rights are respected and upheld at all times.