Hammersmith Florist GDPR Privacy Policy

Introduction

At Hammersmith Florist, we are dedicated to safeguarding the privacy and rights of all our customers who place flower orders in Hammersmith and the surrounding districts. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR). We invite you to read this policy carefully to understand how your data is handled during the order process.

Scope of This Policy

This Privacy Policy applies to all individuals placing orders with Hammersmith Florist, whether through our website, by phone, or in-person, for deliveries within Hammersmith and nearby areas. This policy outlines your rights, our responsibilities, and our commitment to transparency regarding your personal data.

What Data We Collect

To provide our products and services effectively, Hammersmith Florist may collect and process the following personal data:

• Contact Information: Name, delivery address, billing address, and phone number.
• Order Details: Details of the products and services you order, including messages to be included with your order.
• Payment Information: Payment card details (processed securely and not stored by us), and payment confirmation information.
• Account Data: If you create an account, your login details and preferences.
• Communication Records: Correspondence related to your orders, feedback, or queries.

Lawful Basis for Processing Your Data

We process your personal data under the following legal bases as set out by GDPR:

• Contractual Necessity: To fulfil our contract with you when you place an order (processing and delivering your order, providing customer support, and handling payments).
• Legitimate Interests: To improve our services, ensure security, and prevent fraud, provided such activities do not override your fundamental rights and freedoms.
• Legal Obligations: To comply with applicable laws and regulations, such as tax or accounting requirements.
• Consent: Where it is required, such as for sending direct marketing communications, we will obtain your explicit consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal data is used strictly for purposes related to your order and our business operations, including:

• Processing and delivering orders to the specified address
• Communicating order updates and confirmations
• Managing payments and refunds
• Responding to your customer service requests or queries
• Improving our website, services, and customer experience
• Fulfilling any legal requirements

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Typically, we keep order and transaction records for up to seven years to comply with legal obligations and accounting requirements. After this period, your data will be securely deleted or anonymised so it can no longer be linked to you.

Use of Data Processors

To operate efficiently, Hammersmith Florist may engage third-party service providers who act as data processors on our behalf. These may include payment processors, IT service providers, and delivery partners. We ensure that all processors comply with GDPR requirements, process your data only under our instructions, and implement appropriate security measures to protect your information.

Data Security

We take the security of your personal data seriously. Adequate technical and organisational measures are in place to protect your data against accidental loss, misuse, unauthorised access, disclosure, and alteration. These include secure servers, encryption, access controls, and staff training. Only employees and processors who need your data to fulfil their job responsibilities are granted access to it.

Your Rights Under GDPR

Under the GDPR, you have several key rights regarding your personal data. These include:

• Right to Access: You may request a copy of your personal data and information about how we process it.
• Right to Rectification: You can ask us to correct or update any inaccurate or incomplete data we hold about you.
• Right to Erasure: Also known as the 'right to be forgotten,' you may request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data in certain cases.
• Right to Data Portability: You are entitled to receive your personal data in a structured, commonly used format and transfer it to another controller.
• Right to Object: You may object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we process your data based on your consent, you can withdraw it at any time.

How to Exercise Your Rights

To exercise any of your rights or seek further clarification about how your data is processed, please submit a request using the designated contact form on our website or contact us in writing. We may need to verify your identity before responding. We will respond to your request as soon as possible, and always within one month, unless legal obligations require a longer period. Please note that some rights are subject to legal restrictions or obligations that may affect our ability to comply fully with your request.

Children's Privacy

Hammersmith Florist does not knowingly collect personal information from children under the age of 16. If we are made aware that we have inadvertently received such information, we will take steps to delete it as soon as possible.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. Updates will be effective as soon as they are posted. We encourage you to periodically review this policy to stay informed about how we protect your data.

Contact and Complaints

For any concerns or complaints about the way your personal information is handled, or if you have questions about this Privacy Policy, please contact us using the channels provided on our website. You also have the right to lodge a complaint with your national data protection authority if you believe we are not complying with the relevant data protection laws.

Conclusion

Your privacy is important to us at Hammersmith Florist. We are committed to handling your data responsibly and transparently, upholding both your rights and our legal obligations. Thank you for trusting us with your information.