Wennington Florist Privacy Policy

Scope of This Policy

This Privacy Policy applies to all customers who place flower orders with Wennington Florist, whether residing in Wennington or the surrounding districts. Our commitment is to process your personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and best industry practices.

What Personal Data We Collect

When you place an order or interact with Wennington Florist, we may collect the following types of personal information:

• Identity Information: Name and, if applicable, names of recipients.
• Contact Information: Delivery address, phone number, postal code, and other delivery details.
• Order Details: Items ordered, order instructions, messages for recipients, card messages, and any personalisation requests.
• Payment Information: Payment transaction details (Note: we do not store your card details; these are handled securely by our payment processor).
• Communications: Any correspondence with us, whether by phone, written communication, or through our website’s contact form.
• Technical Data: IP address, browser type, and access times (where applicable through website usage).

Our Lawful Basis for Processing Your Data

Wennington Florist collects and uses your personal data only where a lawful basis exists under GDPR. The lawful bases for data processing include:

• Contractual Necessity: To process your order and deliver flowers as per your instructions.
• Legal Obligation: To comply with laws and regulations relevant to taxation and consumer protection.
• Legitimate Interests: For administrative purposes such as record keeping, responding to queries or complaints, and improving our services. We consider your rights and interests whenever we rely on legitimate interests.
• Consent: Where you have given explicit permission, such as to receive marketing communications. You can withdraw consent at any time.

How We Use Your Information

Your personal data is used to:

• Process and fulfil your order, including delivery and payment.
• Communicate with you about your order and respond to your queries.
• Improve our services and customer experience.
• Comply with applicable legal and regulatory obligations.
• Send marketing communications if you have opted in.

Data Sharing and Processors

We do not sell your personal data. However, to provide services, your data may be shared with trusted third-party processors, including:

• Payment Processors: Securely process your payment on our behalf.
• Delivery Partners: Facilitate the delivery of your order to the specified location.
• IT and Service Providers: Maintain our website, manage customer databases, and support communications.

All third-party service providers are contractually required to protect your data and comply with GDPR requirements. They are not permitted to use your data for their own purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Generally, order and contact data is kept for up to seven years post-transaction, in line with tax and accounting rules. After this period, data is securely deleted or anonymised. If you opt in for marketing, we will hold marketing contact information until you withdraw consent.

Your Data Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any inaccurate or incomplete data.
• Right to Erasure: Ask for your personal data to be deleted where appropriate ("right to be forgotten").
• Right to Restrict Processing: Request limited processing in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another provider.
• Right to Object: Object to our processing of your data where we rely on legitimate interests, or direct marketing purposes.
• Right to Withdraw Consent: If we process data based on your consent, you may withdraw this at any time.

To exercise your rights or learn more, please contact us in writing. We will respond to your request in accordance with legal requirements, aiming to resolve any queries within one month.

Your Data Security

We are dedicated to safeguarding your information by using appropriate technical and organisational measures to secure your data from unauthorised access, alteration, disclosure, or destruction. We regularly review our practices to maintain data integrity and privacy.

International Data Transfers

As a standard practice, your data is stored within the UK or the European Economic Area (EEA). If a third-party processor located outside these areas is engaged, we ensure that adequate safeguards, such as Standard Contractual Clauses, are implemented for your protection.

Children’s Privacy

Wennington Florist’s services are not targeted towards individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please inform us so we can take appropriate action.

Policy Updates

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The most current version will always be available to our customers. We encourage you to review this policy periodically to stay informed about our privacy practices.

Contact and Complaints

If you have questions about this Privacy Policy, your rights, or our data practices, please write to us. If you believe your data protection rights have been violated, you may also contact the Information Commissioner's Office (ICO) or your local data protection authority.