Florist Cubitt Town Privacy Policy

Introduction

This privacy policy outlines how Florist Cubitt Town collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with Florist Cubitt Town from Cubitt Town and the surrounding districts.

What Data We Collect

Florist Cubitt Town is committed to collecting only the information required to process your order and provide you with our services. We may collect the following categories of personal data:

• Identity Information: Your name, and the recipient’s name (if different).
• Contact Information: Postal addresses, delivery addresses, and, where provided, telephone numbers.
• Order Information: Details of the products you order, order dates, order numbers, and delivery instructions.
• Payment Information: Partial details required for transaction processing (note: full card/banking details are only processed via secure, third-party payment providers and are not stored by us).
• Communications: Any correspondence you send to us, including any special requests concerning your order.
• Technical Data: Limited device or website access data (such as IP addresses, browser type, and cookies) necessary for website operation and order processing.

Lawful Basis for Processing

All personal data is processed lawfully, fairly, and transparently according to one or more of the legal bases set out by GDPR. These include:

• Contract: Processing is necessary for the performance of a contract to which you are a party, such as fulfilling your order.
• Legal Obligation: Processing is required for us to comply with legal and regulatory requirements (such as tax regulations).
• Legitimate Interests: We may process data to pursue our legitimate business interests, provided these do not override your fundamental rights. For example, for fraud prevention or to improve our customer service.
• Consent: In situations where we require your consent (such as for direct marketing), we will ask for your explicit permission, and you always have the right to withdraw this consent at any time.

How We Use Your Data

We will use your data only for the purposes it was collected for, including:

• Processing and fulfilling your flower delivery orders.
• Communicating with you about your order or in response to your enquiries.
• Managing and improving our website and services.
• Meeting our legal and regulatory obligations.
• If opted-in, sending you information about promotions or updates relevant to our services.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. The following retention guidelines apply:

• Order and transaction records are kept for up to seven years to comply with legal and accounting requirements.
• Contact and communication data used solely for customer service will typically be stored for no longer than 12 months after your last interaction, unless required by law.
• Data used for marketing purposes (when consented to) will be retained until you withdraw your consent or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer identify you.

Third-Party Processors

Florist Cubitt Town uses carefully selected third-party processors to help provide our services. These may include:

• Payment Service Providers: For secure payment processing (such as card transactions).
• IT and Hosting Providers: For managing our website and ensuring service continuity.
• Delivery Partners: To facilitate the delivery of your floral orders.
• Accountants and Legal Advisors: Only as required by law or for resolving disputes.

All processors act on our instructions and are contractually required to maintain appropriate security measures in accordance with GDPR standards. We ensure that your data is never sold to other companies.

Your Data Rights

Under GDPR, you have several important rights concerning your personal data. These include:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can request correction of personal data that is inaccurate or incomplete.
• Erasure: You can request deletion of your data where there is no longer a legitimate reason for us to retain it.
• Restriction: You can ask us to restrict the processing of your data under certain circumstances.
• Portability: You may request a transfer of your personal data to another service provider.
• Objection: You have the right to object to certain types of processing, for example direct marketing.
• Withdraw Consent: Where processing is based on your consent, you can withdraw this consent at any time.

If you wish to exercise any of these rights, please contact us using the communication channels provided on our website. You also have the right to raise a complaint with the UK’s Information Commissioner’s Office (ICO) if you believe your data is not being handled lawfully.

Data Security

We take the protection of your data seriously. Appropriate technical and organisational measures are in place to prevent unauthorised access, alteration, disclosure, or loss of your personal information. Our security practices include regular monitoring, secure storage solutions, access controls, and staff training on data protection principles.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. We encourage you to review this page regularly for the latest information on how we protect your privacy. We will notify you of significant changes where required.

Applicability

This privacy policy applies specifically to all customers placing orders with Florist Cubitt Town from Cubitt Town and neighbouring districts. The policy is effective from the date of publication and remains applicable until superseded by a new version.