Romford Florist Privacy Policy

Introduction

Romford Florist respects your privacy and is committed to safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in line with the General Data Protection Regulation (GDPR). The policy applies to all individuals placing orders with Romford Florist from Romford and surrounding districts, whether online, in-person, or via telephone.

What Data We Collect

When you place an order or get in touch with Romford Florist, we may collect and process the following categories of personal data:

• Identity Data: Your first name, last name, and, where applicable, recipient's name.
• Contact Data: Your billing address, delivery addresses, and contact numbers.
• Order Data: Details of the products ordered, purchase history, order preferences, and delivery instructions.
• Payment Data: Transaction data (note: payment card details are not stored by Romford Florist but may be processed securely by authorised payment providers).
• Communication Data: Records of correspondence, feedback, or queries.
• Technical Data: When you use our website, we may collect your IP address, browser type, device type, and other technical information through cookies or similar technologies.

Lawful Basis for Processing Your Data

We collect and process your personal data only when we have a legal basis to do so under the GDPR. The lawful bases we use include:

• Contractual Necessity: We process your data to fulfil the contract when you place an order with us, including taking payment, arranging delivery, and communicating updates concerning your purchase.
• Legal Obligation: We may process your data to comply with legal and regulatory requirements, such as tax or accounting rules.
• Legitimate Interests: We process some data to improve our services, respond to your enquiries, and prevent fraud — always ensuring these interests do not override your rights and freedoms.
• Consent: Where you have opted in to receive marketing communications, we process your data based on your consent. You may withdraw consent at any time.

How We Use Your Data

Romford Florist uses your data for the following purposes:

• To process and fulfil your orders, including arranging for bouquet delivery to you or your recipient.
• To manage your payment and provide necessary invoices or receipts.
• To respond to your enquiries, feedback, or requests for support.
• To improve our website, services, and customer experience.
• To send you service-related communications and, where permitted, marketing offers.
• To comply with our legal and regulatory obligations.

Retention of Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Generally, we keep order and transaction data for up to seven years to comply with accounting and tax law. Browsing data collected by cookies is kept for a period stated in our cookies policy. Marketing data is retained until you withdraw consent or unsubscribe.

Processors and Third Parties

Romford Florist may share your personal data with trusted service providers who assist us in delivering our services, including:

• Payment processing companies (to securely process online transactions).
• Delivery partners and couriers (for delivering your order).
• IT service providers (for website hosting, customer databases, and communications).
• Accountancy and legal advisors (for financial compliance and advice).

We ensure that all third-party processors act solely on our instructions and comply with GDPR. They are required to keep your data secure and confidential and may not use it for their own purposes.

International Data Transfers

Your personal data is primarily stored and processed within the UK and European Economic Area (EEA). Should data be transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Security of Your Data

Romford Florist takes the security of your personal data seriously. We use technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. Access to data is restricted to only those who need it for legitimate business purposes.

Your Rights Under GDPR

Under the GDPR, you have several rights regarding your personal data:

• Right of Access: You can request confirmation of whether we process your data and request a copy of the data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you can ask us to delete your data (also known as the 'right to be forgotten').
• Right to Restrict Processing: You can ask us to restrict or suppress processing in certain situations.
• Right to Data Portability: You may request a copy of your data in a commonly used format or request that we transmit it to another data controller.
• Right to Object: You can object to certain processing, including direct marketing, at any time.
• Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw it at any time.

If you wish to exercise any of these rights, please contact us through our website or in person at our store. We may need to verify your identity before processing your request to ensure your data is adequately protected.

Changes to This Privacy Policy

We keep our Privacy Policy under regular review and may update it to reflect changes in our practices or legal obligations. Any substantive changes will be highlighted in-store and on our website. Your continued use of our services signifies your acceptance of the policy as updated.

Contact and Complaints

If you have questions about this Privacy Policy, your rights, or how we handle your personal data, please contact us through the details available on our website or visit our physical store. Should you remain dissatisfied with our responses, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Applicability

This Privacy Policy is intended for all customers placing Romford Florist orders within Romford and the surrounding districts. By placing an order or interacting with us, you acknowledge that you have read and understood this policy.