Florist Teddington Privacy Policy

Introduction

This Privacy Policy details how Florist Teddington collects, uses, stores, and protects the personal information of customers placing orders through our services in Teddington and the surrounding districts. Your privacy is important to us, and we are fully committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Please take the time to read this policy to understand our practices and your rights.

Scope of this Policy

This Privacy Policy applies to all individuals who place orders with Florist Teddington, whether through our website, over the phone, or in person, covering customers in Teddington and neighbouring areas. By choosing our services, you acknowledge your acceptance of this policy and the terms described herein.

What Data We Collect

Florist Teddington collects only the data necessary to process and fulfil your order and to comply with statutory requirements. The types of data we may collect include:

• Personal Identification Information: Full names of the customer and, where applicable, the recipient.
• Contact Details: Delivery address, billing address, and telephone number.
• Order Details: Details of your purchased items, special instructions, gift messages, and delivery preferences.
• Payment Information: Limited financial data necessary for transaction processing (note that card details are processed securely by certified payment processors and not stored by Florist Teddington).
• Communication Records: Any communication between you and Florist Teddington concerning orders or customer service.
• Technical Data: IP address, browser type, device information (if you order via our website), and cookies necessary for website functionality.

Lawful Basis for Processing Your Data

Florist Teddington relies on specific lawful grounds for collecting and processing your personal data, in line with the GDPR:

• Contractual Necessity: The majority of your data is required for us to process and deliver your order and provide associated customer service.
• Legal Obligation: Certain records, such as invoices or transaction information, may be kept to comply with tax and accounting laws.
• Legitimate Interest: We may use your data for internal analysis (such as monitoring our delivery performance) and for improving our services, provided such interests do not override your privacy rights.
• Consent: If we introduce optional marketing communications or wish to use your data beyond the necessary business purposes, we will obtain your explicit consent, which can be withdrawn at any time.

Retention of Your Information

Personal data is retained only as long as necessary for the purposes for which it was collected and to comply with legal obligations. Typically, order and invoicing data will be held for up to seven years, in accordance with applicable tax laws. Communication records are kept for as long as needed to address customer queries and resolve any issues, after which data will be securely deleted or anonymised.

Data Sharing and Processors

Your personal data is primarily accessed and processed by staff at Florist Teddington. However, we may share your information with trusted third parties who process data on our behalf to facilitate efficient fulfilment of your order. These include:

• Payment Processors: Certified and secure third-party providers who manage online and telephone transactions.
• IT Service Providers: Companies supporting our website and secure data storage solutions.
• Delivery Partners: Local couriers or external delivery services facilitating the delivery of your order.

All third parties accessing personal data act as data processors on our behalf and are contractually obligated to safeguard your information in accordance with the GDPR. Personal data is never sold, rented, or otherwise shared for third party marketing purposes.

International Transfers of Data

Your personal data is primarily processed within the United Kingdom. If it becomes necessary to transfer your data to a processor outside the UK or European Economic Area, we will implement appropriate safeguards in line with GDPR requirements to ensure your data remains protected.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have several important rights regarding your personal data:

• Right to Access: You may request confirmation and a copy of the personal data held about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can ask us to delete your personal data where there is no legal or legitimate reason for us to continue processing it.
• Right to Restrict Processing: You may ask us to limit the use of your data in specific circumstances.
• Right to Data Portability: Where processing is based on consent or contract, you can ask for your data to be provided in a structured, commonly used format.
• Right to Object: You have the right to object to the processing of your data in certain situations, such as direct marketing.
• Right to Withdraw Consent: Where you have given consent, you can withdraw it at any time without affecting previous lawful processing.
• Right to Lodge a Complaint: You may lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.

Security of Your Data

We implement suitable technical and organisational measures to protect your data from unauthorised access, loss, destruction, or disclosure. These include restricted access, secure storage, staff training, and regular review of our data protection processes. While every effort is made to safeguard your information, please be aware that no method of data transmission or storage can be guaranteed 100% secure.

Policy Updates

Florist Teddington periodically reviews this Privacy Policy to ensure ongoing compliance and transparency. We encourage you to review this policy regularly to stay informed about how we protect your information. Significant changes will be communicated appropriately.

Contacting Florist Teddington

For any questions about this Privacy Policy or to exercise any of your GDPR rights, please contact us through the methods available on our main website or in-store. We are committed to responding to your inquiries promptly and upholding your data protection rights at all times.