Biggin Hill Florist Privacy Policy

Scope of This Privacy Policy

This Privacy Policy applies to all customers placing orders with Biggin Hill Florist from Biggin Hill and the surrounding districts. We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). Please read this Policy carefully to understand how we collect, use, store, and safeguard your information.

Personal Data We Collect

When you place an order with Biggin Hill Florist, interact with our website, or communicate with us, we may collect and process the following categories of personal data:

• Contact Information: Name, address, phone number, and, if provided, special delivery instructions.
• Order Information: Details of your purchase, including product choices, delivery addresses, recipient names, messages for card inserts, and order notes.
• Payment Information: Transaction information (we do not store card details; these are handled securely by our payment processors).
• Communication Data: Records of communications, such as emails, messages, or telephone correspondence with us regarding your orders or enquiries.
• Website Usage Data: Technical information such as IP address, browser type, and device identifiers collected via cookies or similar technologies for site functionality and analytics.

Lawful Basis for Processing Data

We only process your personal data where a lawful basis applies under the GDPR:

• Contractual Obligation: Processing is necessary to fulfil your order, provide products or services, and manage your customer relationship with us.
• Legal Compliance: To comply with applicable laws, tax, and regulatory obligations.
• Legitimate Interests: We may process data based on our legitimate business interests, such as improving our services, managing our operations, or preventing fraud, provided your own rights and interests do not override these.
• Consent: When you opt-in to marketing or promotional communications, we process your data with your explicit consent, which can be withdrawn at any time.

How We Use Your Information

Your data is used for the following purposes:

• To process and deliver your flower orders.
• To communicate with you about your order, delivery updates, or customer service enquiries.
• To improve and develop our products, services, and customer experience.
• To fulfil legal or regulatory requirements.
• To send marketing messages or promotions where you have provided consent.
• For internal record-keeping and administration.

Data Retention

We retain your personal data only as long as necessary to fulfil the purpose it was collected for, including legal, accounting, or reporting requirements. Generally, personal information related to your orders is kept for six years to comply with tax and business record obligations. After the retention period, your data is securely deleted or anonymised so that you are no longer identifiable.

Use of Data Processors

In some instances, we engage trusted third-party service providers ("data processors") who may process your data on our behalf. These processors may include:

• Payment processors to securely handle transactions.
• Delivery partners to ensure accurate and timely fulfilment of orders.
• IT service providers for website hosting, maintenance, and data security.
• Communication platforms for managing customer correspondence.

We ensure that all data processors comply with GDPR requirements, process your data only as instructed by us, and take appropriate security measures. Personal data is not transferred outside the European Economic Area (EEA) unless adequate protection is guaranteed.

How We Protect Your Information

Biggin Hill Florist takes your data security seriously. We implement technical and organisational measures to protect your information from unauthorised access, alteration, or disclosure. These measures include secure servers, restricted access to personal data, data encryption, and regular reviews of our data handling practices.

Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct any inaccurate or incomplete information.
• Erasure: You can request the deletion of your personal data under certain circumstances.
• Restriction: You can request that we restrict the processing of your data in certain situations.
• Data Portability: You can request to receive your personal data in a structured, commonly used format.
• Objection: You can object to certain types of processing, such as direct marketing.
• Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.

If you wish to exercise any of your rights, please contact us using the details provided on our website or any order confirmation correspondence. We will respond to all legitimate requests within one month.

Changes to This Policy

We may update this Privacy Policy from time to time to comply with legal requirements or reflect changes in our business operations. Any modifications will be effective immediately upon posting the updated policy on our website. We encourage you to revisit this page regularly to stay informed about our data practices.

Contact and Queries

If you have any questions or concerns regarding this Privacy Policy, our data processing practices, or your rights, please contact us using the details provided through our website or on your order confirmation documentation. We are committed to addressing your queries and supporting your privacy rights in accordance with GDPR.