Redbridge Florist Privacy Policy

Scope of this Privacy Policy

This Privacy Policy outlines how Redbridge Florist collects, uses, stores, and protects the personal information of customers placing orders within Redbridge and its surrounding districts. It also describes your rights under the UK General Data Protection Regulation (GDPR). Redbridge Florist is deeply committed to safeguarding your privacy and ensuring the security of your personal data.

What Personal Data Do We Collect?

When you place an order with Redbridge Florist, we collect the following types of personal data as necessary to process and deliver your purchase:

  • Identity Information: Name, surname, and, where applicable, title.
  • Contact Data: Delivery address, billing address, telephone numbers, and recipient’s address details.
  • Order Information: Product selections, delivery instructions, gift messages, order and payment details (note: payment card details are processed only by secure payment providers and not stored by us).
  • Communication Data: Records of correspondence (such as messages left via our website or notes on telephone orders).
  • Marketing Preferences: Opt-in or opt-out information for receiving promotional materials if you have given your consent.

We do not intentionally collect Special Category Data, such as information regarding your health, ethnicity, or biometric data.

Lawful Basis for Processing Your Data

Redbridge Florist only processes personal data where we have a lawful basis under the GDPR. These include:

  • Contractual Necessity: To process your orders, deliver goods, provide customer service, and manage payments, we require certain personal information.
  • Legal Obligation: To fulfil legal obligations, such as maintaining business and tax records.
  • Legitimate Interests: We may process data to better understand customer needs, improve our services, and protect against fraud, provided these interests are not overridden by your rights and interests.
  • Consent: For sending marketing communications, we rely on your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

Your personal information is used solely for the purpose for which it was collected, including:

  • Processing and delivering your orders accurately and efficiently
  • Managing customer service queries and after-sales support
  • Complying with our legal obligations and record-keeping requirements
  • Contacting you regarding changes to your order or delivery information
  • Sending you marketing updates if you have opted in

Data Retention Periods

We only retain your personal data for as long as necessary to fulfil the purpose for which it was collected, including satisfying legal, accounting, and regulatory requirements. Typically we retain order, contact, and invoice data for up to 7 years to comply with tax and business record retention laws. After this period, data is securely deleted or anonymised.

Data Processors and Third Parties

In the course of processing your order, we may share your data with trusted external processors who help us provide services, such as:

  • Payment providers: To process transactions securely (payment details are not stored by Redbridge Florist).
  • Delivery couriers or partners: To enable accurate delivery of your orders.
  • IT systems providers: To maintain our website and order management systems.

All data processors are contractually required to comply with GDPR, process data only on our instructions, and ensure the security and confidentiality of your data. We do not sell or rent personal data to third parties for marketing or any other unauthorised use.

Your Data Protection Rights

Under the GDPR, you have a number of important rights with respect to your personal data held by Redbridge Florist:

  • Right to be informed: You have the right to clear and transparent information about our data collection and use.
  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You may ask us to correct any inaccurate or incomplete data.
  • Right to erasure: In certain circumstances, you may request the deletion of your data.
  • Right to restrict processing: You may request that we limit how your data is used.
  • Right to data portability: You may request a transfer of your data to you or another provider.
  • Right to object: You may object to processing based on legitimate interests or direct marketing at any time.
  • Rights relating to automated decision making: Redbridge Florist does not make use of automated decision-making or profiling in its services.

If you wish to exercise any of these rights, you may contact us using the details provided on our website or at our shop. We will respond to your request within one month, as required by law. You may also lodge a complaint with the Information Commissioner's Office if you believe your data rights have been breached.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. This includes secure online ordering systems, restricted access to order information, and staff training in data protection best practices.

International Data Transfers

Your data is stored and processed within the United Kingdom. If in rare instances your data is transferred outside the UK (for example, for IT support), we ensure appropriate safeguards are in place to guarantee the same level of protection required under GDPR.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal and regulatory reasons. Please review it regularly. Where significant changes are made, we will take steps to notify you, such as by posting a prominent notice on our website or informing you during the order process.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data we hold about you, please contact us using the methods set out on our website or by visiting our Redbridge shop in person. We are committed to resolving any privacy concerns promptly and transparently.