Privacy Policy for Customers of East Dulwich Flowers

Introduction

At East Dulwich Flowers, we are committed to safeguarding the privacy and personal data of all our customers. This Privacy Policy explains how we handle, process, and protect personal information for individuals placing orders with us from East Dulwich and the surrounding districts, in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

What Data We Collect

When you order from East Dulwich Flowers, we collect various types of personal data necessary to process your request and deliver our products and services. The specific types of data we collect may include:

• Contact Information: such as your name, delivery address, and billing address.
• Order Details: including products purchased, delivery instructions, and order notes.
• Payment Information: transaction details (please note that East Dulwich Flowers does not store credit or debit card details; these are processed securely by our payment processors).
• Communication Data: records of your interactions with us, such as when you contact us by phone, through our website forms, or in person.
• Device and Usage Data: information on how you interact with our website, potentially including IP address, browser type, and device identifiers (collected through cookies or similar technologies).

Lawful Basis for Processing Your Data

We process your personal information on the following lawful bases, as defined by the GDPR:

• Contractual Necessity: We require certain personal data to fulfil and deliver your orders, and to perform our contract with you when you make a purchase.
• Legal Obligation: We are required to retain data for accounting, taxation, and other statutory requirements.
• Legitimate Interests: We may process your data to improve our products and customer service, communicate important order updates, or protect our business rights and interests, provided these interests are not overridden by your rights and freedoms.
• Consent: In circumstances where we collect data not strictly necessary for your purchase (for example, for direct marketing communications), we will obtain your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used for the following key purposes:

• To process, fulfil, and deliver your orders.
• To communicate with you about your orders, delivery, or related customer service matters.
• To manage payments and prevent fraudulent transactions.
• To comply with legal and regulatory obligations.
• To enhance our products, services, and user experience.

Data Retention

We store your personal information for only as long as is necessary to fulfil the purpose it was collected for, to comply with legal, accounting, or reporting requirements, and to resolve any disputes or enforce our agreements. Typically, we retain order and contact data for up to seven years, in line with statutory retention periods for business records. After this period, your data will be securely deleted or anonymized. If you request us to delete your data sooner (and no longer have any active orders), we will review and fulfil your request wherever legally permissible.

Data Processors and Sharing Your Information

We may share your personal information with selected third parties who act as data processors on our behalf. These third parties help us deliver our services efficiently and may include:

• Payment processing providers (for secure payment transactions).
• Delivery service providers (to deliver your orders to your specified address).
• IT and website hosting service providers (to maintain the functionality and security of our website and systems).
• Professional advisors and legal authorities (where required by law, or for the defence or exercise of legal claims).

We require all third-party processors to respect the security and confidentiality of your data and to process it only in accordance with our instructions. Your personal data will not be transferred outside the United Kingdom or the European Economic Area unless adequate safeguards are in place.

Your Rights Under the GDPR

As a customer of East Dulwich Flowers, you have the following rights in relation to your personal data:

• Right to Access: You may request a copy of your personal data we hold.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to Erasure: You may ask us to delete your personal data, subject to legal or contractual limitations.
• Right to Restrict Processing: You can request the restriction of processing in certain circumstances.
• Right to Data Portability: You can request your data be provided to you or transferred to another provider in a machine-readable format where technically feasible.
• Right to Object: You have the right to object to processing based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where you have given consent, you may withdraw it at any time for future processing.

To exercise any of these rights, or if you have questions about this policy, you may contact us using the contact details available in our shop or on our website. We will respond to your requests in accordance with GDPR requirements.

Security of Your Data

We take the security of your personal data seriously and use appropriate organisational and technical measures to protect it from loss, misuse, unauthorised access, disclosure, or alteration. Access to your data is restricted to employees and agents who need it to fulfil your order or support our services. We regularly review our data protection practices to ensure that your information remains safe.

Updates to This Privacy Policy

This policy may be updated from time to time to reflect changes in our business practices, legal requirements, or technology. Customers are encouraged to review the policy periodically for the latest information. Changes will take effect immediately upon being posted on our website or made available in-store.

Applicability

This Privacy Policy applies to all customers placing orders with East Dulwich Flowers from East Dulwich and the surrounding districts. By placing an order, you acknowledge and agree to the practices outlined in this policy.

Contact

For further information about this Privacy Policy or how your personal data is used, you can contact us through the contact details available at our business location or via our website. We are happy to address any questions or concerns you may have regarding your privacy and data protection rights.