Privacy Policy for Florist De Beauvoir Town Customers

Introduction

This Privacy Policy explains how Florist De Beauvoir Town collects, uses, stores, shares, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders from De Beauvoir Town and the surrounding districts. We are committed to ensuring that all personal data we process is protected and handled responsibly.

What Data We Collect

When you place an order with Florist De Beauvoir Town, we may collect the following information:

• Identity Data: Your name and, if relevant, the recipient’s name
• Contact Data: Billing and delivery addresses, telephone number, and additional contact details you provide
• Order Details: Details about your floral order, delivery instructions, and requested messages
• Payment Data: Payment card type and limited payment identifiers (no full card numbers or security codes are stored by us)
• Technical Data: IP address, device type, browser type, and information about your interaction with our website (through cookies and analytics)
• Correspondence: Any emails, notes or messages sent to us regarding your order or our services

Lawful Basis for Processing

We process your personal data under the following lawful bases as defined in GDPR:

• Contract: To fulfil and manage your order, send delivery updates, and provide customer service
• Legal Obligation: To comply with necessary record-keeping, tax, and accounting requirements
• Legitimate Interests: To improve our service, manage internal operations, prevent fraud, and ensure website security, as long as these do not override your rights
• Consent: Where you have explicitly provided consent, such as for marketing communications (if applicable)

How We Use Your Information

Your personal data is used to:

• Process and deliver your order
• Communicate order updates, confirmations, and address queries
• Improve customer experience and site functionality
• Comply with legal and regulatory requirements
• For internal record keeping and account management

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically:

• Order details and invoicing information are kept for up to 7 years to comply with tax and accounting obligations
• Correspondence and support queries are kept for up to 3 years
• Technical data and analytics are retained for up to 26 months

Once the relevant retention period has expired, your data will be securely deleted or anonymised.

Data Processors and Sharing of Information

Florist De Beauvoir Town may share your data with third parties when necessary, and only with trusted entities or services that adhere to GDPR requirements:

• Payment Processors: To securely process payments for your orders
• Delivery Providers: To facilitate timely deliveries to the address provided
• IT and Website Providers: For secure hosting, maintenance, and analytics services
• Professional Advisors: (e.g., accountants or legal advisors) for compliance and safeguarding purposes
• Regulatory Authorities: Where required by law

All third-party processors are carefully selected and required to process your data in accordance with GDPR. We do not sell, rent, or trade your personal data with outside parties for marketing purposes.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request corrections to any inaccurate or incomplete information
• Right to Erasure: Request the deletion of your data when there is no longer a lawful basis for us to keep it
• Right to Restriction: Ask us to restrict processing in certain circumstances
• Right to Data Portability: Receive your provided data in a structured, machine-readable format
• Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of your rights, please contact us directly. We will respond to all legitimate requests within one month, as required by law.

Security of Your Data

We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, secure servers, and regular review of security protocols. Nonetheless, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

International Data Transfers

We endeavour to keep your data within the United Kingdom and European Economic Area (EEA). In the event any personal data is transferred outside these regions (for example, if a processor operates internationally), such transfers will only occur where adequate levels of data protection are ensured and in accordance with GDPR requirements.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal obligations, our data processing practices, or the services we offer. The most current version will always be available on our website. Please review this page regularly to stay informed of your rights and how we use your personal data.

Contacting Us

If you have any questions about this Privacy Policy or about your data, please contact us using the channels provided on our website. We are committed to helping you understand and exercise your rights related to your personal information.