Fulham Florist Privacy Policy

Introduction

This Privacy Policy outlines how Fulham Florist collects, uses, and protects your personal data when you place orders with us. We are dedicated to ensuring your information is handled transparently and in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers who order flowers and related products or services from Fulham Florist, delivered within Fulham and the surrounding districts.

What Data We Collect

When you interact with Fulham Florist, we collect and process personal data necessary to fulfil your order and provide customer support. The data we typically collect includes:

• Contact Information: such as your full name, delivery address, billing address, and phone number.
• Order Information: including product selections, order notes, special instructions, and delivery details.
• Payment Details: limited to payment card information processed via our secure payment processors. We do not store full card details within our system.
• Communication Records: records of your interactions with us, such as order confirmations, queries, and feedback.
• Technical Data: information about your interaction with our website, such as IP address, browser type, device type, and cookies, where applicable.

Lawful Basis for Processing

Our processing of your personal data is always underpinned by a lawful basis, in line with Article 6 of the GDPR. The principal lawful bases we rely on are:

• Contractual Necessity: Most of the data we collect is necessary for us to fulfil your order and contractual obligations to you.
• Legal Obligation: We may process data to comply with legal and regulatory requirements, such as tax and accounting rules.
• Legitimate Interests: To improve our services, manage customer relationships, handle queries and feedback, and for fraud prevention.
• Consent: In rare cases where none of the above apply (e.g. for marketing communications), we will seek your explicit consent, and you can withdraw it at any time.

How We Use Your Data

Your data is used only as necessary to deliver our services and ensure a seamless customer experience, including:

• Processing orders and delivering products to your chosen address.
• Managing payments and refunds in a secure manner.
• Responding to your enquiries and handling requests.
• Improving our products, website, and customer interactions.
• Fulfilling legal, regulatory, or tax obligations.

Retention of Your Information

We only keep your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. The retention periods for your data vary:

• Order Data: Retained for up to 7 years to comply with legal and accounting requirements.
• Communication Data: Retained for up to 3 years from the last order or interaction.
• Technical Data (e.g. cookies): Retained in accordance with our cookie policy and relevant legal obligations (usually up to 2 years).
• Upon expiry of these retention periods, data is securely deleted or anonymised.

Third-Party Processors

We may share some of your personal data with trusted third-party service providers (processors) who perform specific functions on our behalf. These include:

• Payment processing providers handling secure transactions.
• Courier and delivery partners to ensure your order reaches its destination.
• IT and support providers who help maintain our website and customer support systems.

All processors are contractually bound to use your data only for the services we request, and they must meet GDPR’s standards of security and confidentiality. They may not use your data for their own purposes.

Your Rights Under GDPR

If you are a customer residing in Fulham or surrounding districts, you are entitled to the following rights under GDPR:

• The right to access: You can request a copy of the personal data we hold about you.
• The right to rectification: If your data is inaccurate or incomplete, you may ask for corrections or updates.
• The right to erasure: You may request the deletion of your personal data, where permitted by law.
• The right to restriction: You can request limited use of your data under certain circumstances.
• The right to data portability: You can acquire your personal data in a structured, machine-readable format and ask for it to be transferred to a different provider.
• The right to object: You can object to our processing of your data, in situations where we rely on legitimate interests or direct marketing.
• The right to withdraw consent: Where we rely on your consent (e.g., for marketing), you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided during our communications or on your order confirmation.

Data Security

We apply appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, or disclosure. This includes limiting access to your data, regularly reviewing security procedures, and using secure servers for electronic transactions.

Children’s Privacy

Fulham Florist’s services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can address the matter promptly.

Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices or for legal and regulatory reasons. The latest version will always be available on our website and will state the date of most recent revision.

Contact and Complaints

If you have any questions regarding this Privacy Policy or how we handle your personal data, please contact us using the information provided during your order process. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your rights under data protection law have been infringed.