Florists Canary Wharf Privacy Policy

Introduction

This Privacy Policy explains how Florists Canary Wharf collects, uses, stores, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florists Canary Wharf for delivery in Canary Wharf and neighbouring districts.

Data We Collect

When you place an order with Florists Canary Wharf, we may collect the following personal information:

• Name and Contact Details: Including your full name, address, phone number, and delivery address if different.
• Order Details: Information regarding the items ordered, delivery preferences, and any messages you wish to send with your order.
• Payment Information: Payment card details or transaction references processed through secure payment gateways. We do not store full payment card details on our systems.
• Correspondence: Any communications between you and our team, such as queries, complaints, or compliments.
• Technical Information: IP addresses, browser type, and device information collected via our website for security and analytical purposes.

Lawful Basis for Processing Data

Florists Canary Wharf processes your personal data in accordance with the legal bases set out under the GDPR. We rely on the following lawful grounds:

• Contractual Necessity: Most data we collect is required to fulfil the purchase agreement between you and Florists Canary Wharf.
• Legitimate Interests: Certain data is processed to enhance services, improve the user experience, or ensure security, provided these interests do not override your rights.
• Legal Obligation: Some data may be retained or shared if required by law, such as for accounting or fraud prevention.
• Consent: Where applicable, we obtain your explicit consent before sending marketing communications or processing sensitive information.

How We Use Your Information

Your data is used for the following purposes:

• Processing and delivering your floral orders.
• Managing your account and keeping you updated regarding your order status.
• Responding to your enquiries and providing customer support.
• Improving our services, for instance by analysing purchase trends and website performance (anonymously where possible).
• Compliance with legal and financial obligations.
• Sending marketing communications where you have opted in.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Generally, data linked to your purchases and account is retained for a maximum period of six years to comply with accounting and taxation laws. Data used for marketing purposes is held until you withdraw your consent or unsubscribe. After the data is no longer required, it is securely deleted or anonymised.

Data Processors and Third Parties

Florists Canary Wharf uses trusted third-party service providers (data processors) to carry out certain functions, such as:

• Payment processing via secure gateways.
• Order delivery partners and couriers.
• IT and website hosting services.
• CRM and communication system providers.
• Analytical and website optimisation services.

Each processor is vetted to ensure GDPR compliance and is only permitted to use your data as necessary to provide their service to Florists Canary Wharf. We do not sell or rent your information to third parties for their independent use.

International Data Transfers

Your data is stored within the United Kingdom and European Economic Area (EEA) wherever possible. Should it be necessary to transfer data outside the EEA, we ensure such transfers are protected by appropriate legal safeguards, such as Standard Contractual Clauses or adequacy decisions.

Security Measures

Florists Canary Wharf takes the security of your data seriously. We implement suitable technical and organisational safeguards to protect personal data from unauthorised access, alteration, disclosure or destruction. This includes encryption, secure server storage, restricted access controls, and regular reviews of our security measures.

Your Rights

As a customer, you have the following rights under the GDPR:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to applicable legal requirements.
• Right to Restrict Processing: Ask us to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of your rights, please contact us by using the contact information provided on our website. We may require verification of your identity before proceeding with your request.

Policy Updates

Florists Canary Wharf may update this Privacy Policy from time to time to reflect changes in legal obligations or business practices. The current version will always be available via our website. Significant changes will be communicated to you prior to implementation where required.

Contact and Concerns

If you have questions about how your data is collected, stored, or used, or if you wish to make a complaint regarding data protection, please use the contact methods provided on our website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.