Privacy Policy for Florist Westminster Customers

Introduction

This Privacy Policy explains how Florist Westminster collects, uses, stores, and protects your personal data when you place orders with us from Westminster or the surrounding districts. We are committed to upholding your privacy rights as mandated by the General Data Protection Regulation (GDPR). Our policy applies to all customers who order our products or services within Westminster and neighbouring areas.

Data We Collect

When you interact with Florist Westminster, we may collect the following personal data:

• Identity Data: First name, last name, and title.
• Contact Data: Delivery address, billing address, and contact numbers.
• Order Data: Products purchased, delivery instructions, order history.
• Payment Data: Payment confirmation, and limited payment information (we do not store full credit/debit card details).
• Correspondence: Customer communications, feedback, and enquiries.
• Technical Data: IP address, device type, browser type, and access times when using our website or digital services.

We do not intentionally collect sensitive personal data unless it is required by law or necessary to fulfil your order. Where sensitive information is requested, we will clearly identify the reason for collection and obtain your explicit consent where required.

Lawful Basis for Processing Your Data

Under GDPR, we only process personal data when we have a valid legal basis to do so. The lawful grounds on which Florist Westminster relies are as follows:

• Contractual Necessity: To process and deliver your order, manage payments, and provide customer support associated with your purchase.
• Legal Obligations: To comply with relevant legal, tax, and accounting requirements.
• Legitimate Interests: To improve our products and services, administer and protect our website, and to send essential service communications relating to your order. We consider and balance any potential impact on your rights before processing data for our legitimate interests.
• Consent: For sending direct marketing communications when you opt-in. You have the right to withdraw your consent at any time.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, including for satisfying legal, accounting, or reporting requirements. The typical retention periods are:

• Order Data: Retained for 6 years to comply with statutory financial and tax obligations.
• Correspondence and Enquiries: Retained for up to 2 years for customer service and quality improvement purposes.
• Marketing Preferences: Retained until you withdraw your consent or update your preferences.

At the end of retention periods, your personal data is securely deleted or anonymised so it can no longer be associated with you.

Data Processors and Third Parties

Florist Westminster may share your data with trusted third parties who act as data processors for the following purposes:

• Payment Service Providers: To process payments securely.
• Delivery Partners: To deliver your orders to the provided address.
• IT and System Support Providers: To ensure reliable operation of our website and business systems.
• Professional Advisors: Such as accountants or legal consultants in the course of professional services.

All data processors are carefully selected and contractually obliged to safeguard your information and use it only for the specified purposes. They are not permitted to use your personal data for their own direct marketing or other unrelated purposes.

Your data will not be transferred outside the United Kingdom or European Economic Area unless adequate data protection controls are in place, in full compliance with GDPR requirements.

Your Rights Under GDPR

As a customer within Westminster or surrounding districts, you have several rights under GDPR, including:

• Right to Access: You can request confirmation of what personal data we hold about you and receive a copy.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can ask us to delete your personal data where there is no lawful reason for us to continue processing it.
• Right to Restrict Processing: You may ask us to suspend processing if you want us to establish its accuracy or the reason for processing.
• Right to Data Portability: You can request transfer of your data to you or to another provider in a machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests or to receiving marketing communications.
• Right to Withdraw Consent: Where we process data based on your consent, this can be withdrawn at any time.

To exercise any of these rights, or for questions about this Privacy Policy, please contact Florist Westminster by using the contact details on our website or speak to our customer services team. We will address your request as soon as practical, and always within the timelines set out by GDPR.

Security of Your Data

Florist Westminster employs a range of technical and organisational measures to protect personal data from unauthorised access, misuse, alteration, or loss. These include encryption, secure servers, firewalls, regular security reviews, and staff data protection training. While we take appropriate steps to protect your data, please note that transmission over the internet cannot be guaranteed as completely secure.

Policy Updates

We review our Privacy Policy regularly and may update it from time to time to reflect changes in the law or our business practices. When changes are made, we will note the updated policy on our website and, where appropriate, notify you directly. We recommend you review this page regularly to stay informed of our current practices.

Contact and Complaints

If you have any questions or concerns about how your personal data is collected or handled, please use the contact methods provided on our website. If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

This Privacy Policy applies to all customers of Florist Westminster placing orders for products or services from within Westminster and nearby areas.