Privacy Policy for Florist Emerson Park Customers

Our Commitment to Your Privacy

Florist Emerson Park values your privacy and is dedicated to safeguarding your personal data. This Privacy Policy explains how we collect, process, store, and protect your personal data when you place an order with Florist Emerson Park. It applies to all customers placing orders from Emerson Park and surrounding districts. We adhere strictly to the requirements of the General Data Protection Regulation (GDPR).

What Data We Collect

We collect personal data that is necessary for processing your order and providing our services. This may include:

  • Identification data: Your full name and, if applicable, the name of the recipient.
  • Contact details: Delivery address, billing address, and phone number.
  • Email address: For order confirmation, queries, and updates regarding your purchase.
  • Order details: The products and services you purchase, messages or notes included with your order.
  • Payment information: Necessary details to process your payment. Florist Emerson Park itself does not store full card details; payments are processed by secure third-party providers.
  • Communications: Any correspondence between you and Florist Emerson Park regarding your orders or services.
  • Website usage data: Information about your interactions with our website, such as IP address, browser type, and cookies, to improve user experience and detect potential fraud.

Lawful Basis for Processing

We process your personal data on the following lawful bases as stated in GDPR:

  • Contractual necessity: Data processing is necessary for us to fulfill your order or to take steps at your request prior to entering into a contract.
  • Legitimate interests: We may process your data for legitimate business interests such as improving our products and services, fraud prevention, and maintaining business records. We ensure that such processing does not override your rights and freedoms.
  • Legal compliance: In certain cases, we must process your data to comply with our legal obligations under UK law.
  • Consent: Where required (for example, for marketing communications), we will seek your explicit consent, and you have the right to withdraw this at any time.

How We Use Your Data

Your data is used solely to provide you with a smooth and effective service. Main uses include:

  • Processing, confirming, and delivering your flower orders
  • Communicating about your orders, including updates and support
  • Processing payments through secure payment processors
  • Managing your customer account and order history
  • Complying with applicable laws and regulatory obligations
  • Improving our products, services, and website functionality

How Long We Keep Your Data (Data Retention)

Florist Emerson Park retains your personal data only as long as necessary for the purposes it was collected and to comply with legal obligations. The standard retention periods are:

  • Order and transaction data: Usually retained for up to seven years for accounting and tax purposes, unless a longer period is required by law.
  • Customer communications: Retained for the duration of your relationship with us and for a reasonable period afterward, typically not exceeding two years.
  • Marketing data: Retained until you withdraw your consent or unsubscribe from communications.

When data is no longer required, it is securely deleted or anonymised.

Use of Data Processors

Florist Emerson Park uses trusted third-party service providers (data processors) to support our operations, including payment processing, website hosting, and order fulfilment. These processors act strictly under our instructions and are contractually obliged to implement data protection measures in compliance with GDPR.

Whenever we share your data with processors, they are only provided with the information necessary for their specific service function. We do not sell or share your personal data with third parties for their own marketing purposes.

Your Rights Under GDPR

As a data subject, you have several rights regarding your personal data, including:

  • Right to access: You may request access to your personal data and obtain information about how it is processed.
  • Right to rectification: If the information we hold is inaccurate or incomplete, you may request correction or update.
  • Right to erasure: You can request the deletion of your personal data in certain circumstances (also known as the 'right to be forgotten').
  • Right to restrict processing: You may ask us to limit the processing of your data in certain cases.
  • Right to data portability: Where processing is based on consent or contract, you have the right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to object: You can object to processing based on legitimate interests or direct marketing at any time.
  • Right to withdraw consent: Where we process data based on your consent, you have the right to withdraw that consent at any time.
  • Right to lodge a complaint: If you feel your data has not been handled correctly, you may contact the appropriate supervisory authority.

To exercise any of your rights, you may contact us using standard communication channels indicated on our website or through your account interface.

Data Security

Florist Emerson Park implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include secure servers, encryption of payment transactions, restricted access, and employee training in data protection. While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is completely secure. We therefore cannot guarantee its absolute security.

Policy Applicability and Updates

This privacy policy applies to all customers who place orders with Florist Emerson Park from Emerson Park and surrounding districts. We keep our privacy policy under regular review and may update it from time to time to ensure continued compliance with GDPR and relevant UK data protection laws. The effective date of this policy will be indicated at the beginning or end of the document. You are encouraged to review our policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us using the contact information provided on our official website or in your order documentation. Our team is committed to addressing your concerns promptly and transparently.