Florist Paddington – Privacy Policy Statement

Introduction

Florist Paddington is committed to safeguarding the privacy of our customers and ensuring compliance with the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, retain, and protect your personal data when you place an order with Florist Paddington from Paddington and surrounding districts. We encourage you to read this policy thoroughly to understand your rights and our obligations in handling your information.

Scope of the Privacy Policy

This Privacy Policy applies to all individuals who place orders with Florist Paddington for delivery or collection in Paddington and neighbouring districts. By placing an order with us, you acknowledge and agree to the practices described in this policy regarding the collection and use of your personal data.

Types of Data We Collect

In order to fulfil your order and provide you with high-quality customer service, we may collect the following categories of personal data:

• Identity Data: Your name and, if applicable, the recipient’s name.
• Contact Data: Address, delivery address, contact phone number, and optionally, an email address for communications related to your order.
• Order and Transaction Data: Details about the products you order, special requests, payment confirmation, and order history.
• Correspondence: Notes of communications and messages you send us in connection with your orders.
• Technical Data: IP address, browser type, device information, and usage data collected via our website to improve security and service.

Lawful Basis for Processing Personal Data

Under the GDPR, we must have a lawful basis to process your personal data. Florist Paddington processes your information under the following lawful bases:

• Contractual Necessity: To process and deliver your orders, manage payments, and provide customer support as agreed when you place an order.
• Legal Obligation: To comply with legal and regulatory requirements, such as maintaining accounting records or responding to law enforcement requests when applicable.
• Legitimate Interests: To improve our products and services, ensure website security, and prevent fraud, provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent (e.g., for marketing communications), we will ask for it explicitly and you may withdraw it at any time.

How We Use Your Information

Florist Paddington uses your personal data for the following specific purposes:

• To process, confirm, and fulfil your order efficiently.
• To deliver flowers and related gifts to you or your chosen recipient.
• To communicate with you about your order status, respond to enquiries, and provide customer support.
• To improve our website, services, and customer experience.
• To comply with applicable legal requirements and respond to regulatory authorities, if required.

Data Processors and Third Parties

Florist Paddington may use trusted third-party service providers ("Processors") to help deliver your order, manage payments, and enhance our services. These may include payment processing companies, delivery partners, and service providers who help maintain our website. All third-party processors are required to operate in accordance with GDPR and have appropriate security measures in place.

No personal data is sold or shared with third parties for advertising purposes. Disclosure of data to third parties occurs only as necessary to fulfil your order or meet legal obligations.

Retention of Your Data

Florist Paddington will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. In general, we retain data related to transactions for up to seven (7) years in line with UK tax requirements. After this period, your personal data will be securely deleted or anonymised.

If you have given us consent for marketing or other non-contractual purposes, your data will be retained until you withdraw your consent or for as long as it is necessary for those specific purposes.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data processed by Florist Paddington:

• Right to Access: You have the right to request confirmation of whether we process your personal data and, if so, access to that information.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: In certain circumstances, you can ask us to restrict the processing of your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another organisation.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as the legal basis.
• Right to Withdraw Consent: Where processing is based solely upon your consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided in our company information section on our website. We may ask you to verify your identity before responding to your request to maintain your privacy and security.

Data Security

Florist Paddington employs suitable technical and organisational measures to safeguard your personal data from unauthorised access, alteration, disclosure, or destruction. Access to your data is limited to staff and processors who require it to fulfil your order. We regularly review our data handling procedures and our website uses secure technology to protect your information during transmission.

Policy Updates

We may update this Privacy Policy to reflect changes in our practices, legal obligations, or service offerings. The latest version will always be available on our website, and significant changes will be communicated appropriately.

Contact and Further Information

Should you have any questions or concerns regarding this Privacy Policy or your data, please refer to our company information section for details on how to contact us. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

Thank you for choosing Florist Paddington. Your privacy is important to us.