Florist Southfields Privacy Policy Overview

Name: FRESH SCENT
Brand: Florist Southfields
Price: 49.00 GBP
Availability: InStock

Introduction and Scope

This privacy policy sets out how Florist Southfields collects, uses, stores, and protects your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable UK privacy legislation. This policy is specifically for individuals who place orders with Florist Southfields from the Southfields district and its surrounding areas. We are committed to maintaining the privacy and security of our customers' data and to being transparent about how and why we process your information.

What Data We Collect

When you interact with Florist Southfields, we collect the following categories of personal data:

Identification data: Your name, delivery recipient’s name, and title.
Contact data: Delivery address, billing address, contact telephone number, and, where supplied, email address.
Order details: Information related to your floral order such as product selection, delivery instructions, order occasions (such as birthdays or anniversaries), and card messages.
Payment information: Payment amount, method of payment, and sometimes limited payment confirmation details (we do not store full card or bank details, only transaction references as necessary).
Communications: Records of any correspondence with us regarding orders, queries, complaints, or feedback.
Technical data: IP address and device details, when orders are placed through our website or digital channels, for fraud prevention and security purposes.

Lawful Basis for Processing

Florist Southfields only processes your personal data where a lawful basis under GDPR applies. The principal lawful bases we rely on are:

Contractual necessity: Processing is essential for fulfilling your order, including communicating with you about your purchase, arranging delivery, and handling payment.
Legal obligation: We may be required to retain data to fulfil legal requirements, including for tax and accounting purposes or to respond to lawful authorities.
Legitimate interests: Where processing enables us to improve our services, prevent fraud, or manage and defend claims, and where such interests are not overridden by your privacy rights.
Consent: For marketing communications, we will only contact you if you have actively consented to receive such messages. You may withdraw your consent at any time.

How We Use Your Data

We handle your personal data for the following purposes:

To process and deliver your floral orders accurately.
To communicate with you regarding your orders, including providing updates or requesting additional information where necessary.
For customer service purposes, resolving complaints and handling queries.
To comply with banking, accounting, and other legal requirements.
To improve our products and services based on your feedback and purchase history.
With your express consent, to keep you informed about offers, promotions, or updates to our services.

Data Retention

Florist Southfields retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Generally, customer order data is retained for up to six years in compliance with statutory retention rules and to resolve any possible disputes. Communications data may be retained for a shorter period, unless needed for an ongoing issue. Data used for marketing purposes is retained until you opt out or withdraw your consent. Once the relevant retention period has expired, your information is securely deleted or anonymised.

Processors and Data Sharing

In order to process your orders and manage our business, we may share your information with carefully selected third-party processors. These include:

Payment processing providers (to securely process your payments);
Delivery partners or courier services (to ensure your flowers arrive at the correct address);
IT service providers (who manage our website, CRM, or booking systems);
Accounting firms or advisers (for financial and tax compliance);
Legal professionals (in the event of management or resolution of claims).

All third-party processors are required to act solely in accordance with our instructions and are contractually obliged to keep your data confidential and secure. Your data is not sold, rented, or traded to outside parties. We do not transfer your data outside the UK or European Economic Area unless adequate safeguards are in place as required by GDPR.

Your Rights Under GDPR

You have robust rights over your personal data under GDPR, including:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: If you believe any personal data we hold is inaccurate or incomplete, you can request that it be updated or corrected.
Right to erasure: In certain circumstances, you can request that your personal data be deleted, though some data may be retained where required by law.
Right to restriction: You may request that the processing of your personal data is limited in certain cases.
Right to data portability: You have the right to receive your data in a structured, commonly used format for transfer to another provider.
Right to object: You may object to processing that is based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where you have given consent, you may withdraw it at any time, which will not affect processing carried out before withdrawal.
Right to complain: If you have concerns about how we use your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Data Security

Florist Southfields employs appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or misuse. These include secure storage and encryption measures, limiting data access to authorised personnel, and regular staff training on data protection obligations. We periodically review our data processing procedures to ensure ongoing confidentiality and integrity.

Changes to this Privacy Policy

This policy may be updated periodically to reflect changes in our data handling practices or to comply with legal or regulatory changes. The latest version will always be available on our website. Significant changes will be clearly indicated on our platform where possible.

Contact and Further Information

If you have any questions or requests about this policy or how we handle your personal data, please use the contact form provided on our website. We aim to resolve any issues promptly and always respect your privacy rights.