Privacy Policy for Customers of Brunswick Park Florist

Introduction

This Privacy Policy explains how Brunswick Park Florist ('we', 'us', 'our') processes your personal data when you place orders with us from Brunswick Park and the surrounding districts. We are committed to ensuring that your information is protected and handled in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers who purchase our floral products and related services.

What Data We Collect

In order to provide our products and services efficiently, we collect various types of personal data from our customers. Data we may collect includes:

• Identity Data: This includes your first and last name.
• Contact Data: Postal address, delivery address, phone number, and in some cases email address.
• Order Data: Details of the products and services you have ordered from us, date and time of your order, and payment method used (note: we do not store full payment card details).
• Recipient Data: Name and delivery address of recipients if ordering flowers or gifts for others.
• Communication Data: Records of correspondence or interactions you have with us (for example, through order notes or special instructions).
• Technical Data: Where applicable, we may collect anonymised technical information such as IP address, browser type, and information about your interaction with our website for security and analytical purposes.

Lawful Basis for Processing Your Personal Data

Under the GDPR, we must have a valid reason for using your personal data. Our lawful bases for collecting and processing your data include:

• Contractual Necessity: We collect and process your data to fulfill the order you have placed with us, which includes processing payments, delivering products, and managing customer service requests.
• Legal Obligation: In some cases, we may need to retain certain data to comply with accounting, tax, or statutory requirements.
• Legitimate Interests: To improve our services, manage our business effectively, and keep records of transactions (for example, protecting our business against fraud). We will always balance our interests with your rights.
• Consent: Where required, we may seek your consent for specific uses of data, such as sending you marketing communications. You may withdraw your consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

• Processing and delivering your orders (including handling payments and addressing delivery requirements).
• Contacting you regarding orders, deliveries, or customer service queries.
• Communicating with you about our services or offers if you have opted in to receive such information.
• Meeting our legal and regulatory obligations.
• Internal record keeping, analytics, and improving our products/services.

Retention of Personal Data

Your personal data will only be retained for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we keep customer records for up to 7 years after the transaction date in line with applicable tax and accounting laws, after which your data will be securely deleted or anonymised.

Data Processors and Sharing Information

We may share your data with selected third party service providers ('processors') who assist us in delivering our services, for example payment processors, delivery couriers, technical support, and IT service providers. All processors are required to respect the confidentiality and security of your personal information and are not permitted to use your data for their own purposes. We only share information with trusted partners who adhere to the requirements of GDPR and only to the extent necessary to perform their function on our behalf.

We do not sell, rent, or trade your personal data to any third parties. If required to do so by law, we may share information with law enforcement or regulatory authorities.

User Rights Under GDPR

Under the GDPR, you have the following rights in respect of your personal data:

• Right to Access: You can request a copy of any personal data we hold about you.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal information.
• Right to Erasure ('Right to be Forgotten'): You can request that we delete your personal data in certain circumstances, subject to legal or regulatory requirements.
• Right to Restrict Processing: You may request that we limit how we use your personal data, again subject to regulatory or contractual obligations.
• Right to Data Portability: Where applicable, you have the right to request the transfer of your information to another service provider.
• Right to Object: You have the right to object to certain types of processing (such as marketing communications). Where we rely on consent, you have the right to withdraw this at any time.

To exercise any of these rights, or if you have questions about how your data is used, please contact us using the communication options provided in your order documentation or on our website.

Data Security

Brunswick Park Florist takes appropriate security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. We use physical, electronic, and managerial procedures to safeguard the information we collect.

Policy Updates

This privacy policy may be updated from time to time to ensure ongoing compliance with data protection legislation or to reflect changes to our business processes. We encourage you to review this policy periodically. Any significant changes will be brought to your attention if you have an open order or have opted in for customer updates.

Contact and Complaints

If you have any concerns about how your personal data is handled, please contact us using the channels specified in your order confirmation or as published on our website. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).