Florist Covent Garden Privacy Policy

Name: ALL OF ME
Brand: Florist Covent Garden
Price: 100.00 GBP
Availability: InStock

Introduction

This Privacy Policy describes how Florist Covent Garden ("we," "our," or "us") collects, uses, stores, shares, and protects your personal data when you place an order with us from Covent Garden or the surrounding districts. We are committed to handling your personal data responsibly and in line with the requirements established by the General Data Protection Regulation (GDPR) and relevant UK laws. This Privacy Policy is intended for customers placing orders with Florist Covent Garden and applies regardless of whether you interact with us online, by phone, or in person.

The Data We Collect

When you order with Florist Covent Garden, we may collect the following categories of personal information, depending on the nature of your interaction:

Identity Data: Such as your name and, if required, proof of identity.
Contact Data: Including your address for delivery, billing address, and telephone number.
Order Details: Details of the products you have purchased, delivery instructions, and any special requirements you provide.
Recipient Data: Name, delivery address, and any contact details provided for the person receiving the order.
Payment Data: Payment method and transaction details (note: payment card details are securely processed and are not stored by us).
Communication Data: Records of your correspondence with us, including feedback, enquiries, and complaints.
Technical Data: This may include IP addresses, browser type, and usage data where you use our website or online ordering system.

Lawful Basis for Processing Personal Data

Under GDPR, we must have a lawful basis for processing your personal information. Our processing is primarily based on the following lawful grounds:

Performance of Contract: To process and deliver your order, to communicate with you about your order, and to provide after-sales support.
Legal Obligation: For record-keeping and compliance with applicable laws and regulations (such as those related to taxation and fraud prevention).
Legitimate Interests: To enhance and improve our services, analyse customer preferences, and ensure security of our business and services. We always ensure these interests do not override your fundamental rights and freedoms.
Consent: Where required, for example, to send you direct marketing communications (if you have opted in), we rely on your explicit consent. You can withdraw your consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

To process and deliver flower orders and related products.
To handle payments and refunds securely.
To communicate with you about your order status, queries, or issues.
To deliver gifts to the specified recipients.
For internal record keeping, accounting, and auditing.
To improve our products, services, and customer experience.
If you have given consent, to send marketing updates, promotions, or newsletters.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically:

Order and transaction data: Retained for up to 7 years to comply with financial and tax regulations.
Marketing data: Retained until you withdraw your consent or opt out.
Correspondence: Retained for up to 2 years to assist with any queries or complaints.

After the retention period ends, your personal information will be securely deleted or anonymised unless further retention is required by law.

Our Data Processors

We may engage trusted third-party processors to assist us in providing our services. These third parties process your data solely on our instructions and are bound by data protection obligations. Examples include:

Payment processors to handle secure online or card transactions.
Delivery couriers and postal services to fulfil orders.
IT service providers, including website hosting and customer management platforms.
Analytics and business support services for operational improvement.

We do not sell or rent your personal data to any third parties for their own marketing purposes.

Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data. These include:

Right of Access: You may request access to the personal data we hold about you.
Right to Rectification: You may ask us to correct inaccurate or incomplete information.
Right to Erasure: You may request deletion of your personal data, subject to legal and contractual obligations.
Right to Restrict Processing: You may ask us to limit processing of your data in certain circumstances.
Right to Data Portability: You can request that we transfer your data to you or another service provider in a structured, machine-readable format.
Right to Object: You may object to the processing of your personal data on grounds relating to your particular situation, including opting out of direct marketing at any time.
Right to Withdraw Consent: Where our processing relies on consent, you have the right to withdraw it at any time. This does not affect any processing carried out before your withdrawal.

To exercise any of your rights, please contact us through our standard communications channels. We will respond in accordance with applicable data protection laws.

Data Security Measures

We are committed to ensuring that your information is secure. We use rigorous physical, electronic, and managerial procedures to safeguard and secure the personal data we collect. These include restricted access to your information, secure storage, use of encryption where appropriate, and regular security reviews of our procedures.

While we take all reasonable steps to protect your data, no transmission of information via the internet is completely secure. You are responsible for maintaining the confidentiality of any password or login information linked to your account.

Policy Updates

We may review or update this Privacy Policy from time to time to comply with legal, regulatory, or operational requirements. Changes will be effective immediately upon posting. We encourage you to review this page periodically to stay informed of how we protect your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy or wish to make a complaint regarding how your data has been handled, please contact us using our publicly available contact methods. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office or the relevant supervisory authority.

This Privacy Policy is effective as of June 2024 and applies to all Florist Covent Garden customers placing orders from Covent Garden and surrounding districts.