Florist Dartmouth Park Privacy Policy

Scope and Purpose of This Policy

This Privacy Policy explains how Florist Dartmouth Park collects, stores, uses, and protects your personal data when you place an order with us. This policy applies to all customers ordering from Florist Dartmouth Park within Dartmouth Park and all surrounding districts. We are committed to transparency and compliance with the General Data Protection Regulation (GDPR). By ordering from us, you acknowledge and accept the terms described herein.

Types of Data We Collect

When you place an order or interact with Florist Dartmouth Park, we collect the following categories of personal data:

• Identification Data: Full name, delivery address, billing address (if different), and contact number.
• Order Information: Details about your specific order, such as products, preferences, delivery instructions, and associated card messages.
• Communication Data: Correspondence you have with us, including queries, feedback, and complaints.
• Payment Data: Limited payment information, such as transaction reference numbers. We do not store full credit or debit card details, as payment is processed by secure third-party providers.
• Technical Data: Certain information collected from your browser or device when you use our website (such as IP address, browser type, and cookies) to enhance your shopping experience and ensure website security.

Lawful Basis for Processing Personal Data

Under GDPR, we process your data only where there is a lawful basis to do so. Our primary lawful bases for processing include the following:

• Performance of a Contract: We require your personal data to process, confirm, and deliver your order.
• Legal Obligation: To meet our obligations under applicable legislation (e.g., accounting and tax regulations) we may be required to retain specific data.
• Legitimate Interest: For certain purposes, such as service improvement, fraud prevention, and handling customer complaints, we process data in our legitimate interest provided your rights do not override these interests.
• Consent: Where you have provided explicit consent (such as opting in to receive marketing communications), we rely on this basis. You can withdraw your consent at any time.

How We Use and Share Your Data

Your personal data is used exclusively for the purposes described below:

• Processing your orders and arranging delivery to the specified address.
• Communicating with you regarding order updates, delivery status, or questions about your order.
• Improving our services based on your feedback and preferences.
• Fulfilling legal and regulatory requirements.
• Preventing fraud and ensuring the security of our website and services.

We do not sell your personal data. Data may be shared with selected third parties known as 'processors' strictly necessary for delivering our services. Such processors are bound by data processing agreements in accordance with GDPR and are prohibited from using your data for any other purpose.

Data Processors We Work With

To facilitate our services, we may engage the following types of data processors:

• Payment Processors: For secure handling of electronic payments. Only essential transaction data is shared; your full card details are not stored by us.
• Delivery Partners: Third-party couriers or drivers responsible for delivering your order receive your name, address, and contact number to ensure accurate and timely delivery.
• IT Service Providers: Companies who help us manage our website, order processing system, and cybersecurity infrastructure.

We assess our processors for GDPR compliance and require them to implement adequate security measures to protect your data.

Data Retention Periods

Florist Dartmouth Park retains your personal data only as long as necessary to fulfil the purposes for which it was collected, in line with our legal and contractual obligations:

• Order Data: Retained for up to seven years to comply with accounting, tax laws, and resolve any potential disputes.
• Communication Data: Retained for up to five years from last contact to resolve ongoing queries or complaints efficiently.
• Marketing Data: Retained until you withdraw your consent or opt out of receiving communications.
• Technical Data: Retained for up to two years to maintain site security and performance, unless required longer for investigative purposes.

After these periods, your data is securely deleted or anonymised so it can no longer be associated with you.

Your Legal Rights as a Data Subject

As a user, you have a number of rights under GDPR relating to your personal data:

• Right to Access: You may request a copy of your personal data held by Florist Dartmouth Park.
• Right to Rectification: You may request correction of any inaccurate or incomplete data we have about you.
• Right to Erasure: Where applicable, you have the right to request deletion of your personal data.
• Right to Restriction: You can request restriction of processing under specific circumstances.
• Right to Data Portability: You have the right to obtain and reuse your personal data across different services.
• Right to Object: You can object to processing where we rely on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw this at any time.

If you wish to exercise any of these rights, please contact us using the contact details on our website or by visiting our premises. For security and compliance reasons, we may require proof of identity before fulfilling your request. We will respond within the timescales set by the GDPR.

Data Security and International Transfers

We store your personal data within the European Economic Area (EEA) whenever possible. Should any processing occur outside the EEA, we ensure that appropriate safeguards are in place to protect your data.

We employ technical and organisational measures to safeguard your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. This includes encryption, access controls, and staff training.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changes to legal, technical, or business developments. We encourage you to review this policy regularly to stay informed. Significant changes will be highlighted on our website or communicated directly when appropriate.

Contact and Complaints

If you have questions or concerns about how your data is handled, or if you wish to make a complaint, you have the right to contact or lodge a complaint with the relevant supervisory authority. We encourage you to raise concerns with us first, and we will do our best to address them to your satisfaction.