Florist Mile End Privacy Policy

Overview of Our Privacy Commitment

At Florist Mile End, safeguarding your personal data is fundamental to our commitment as a trusted local florist. This Privacy Policy explains how we collect, use, store, and share your information when you place an order with us from Mile End or surrounding districts. Our practices meet the requirements of the General Data Protection Regulation (GDPR) and align with best industry standards.

Scope of this Policy

This Privacy Policy applies to all individuals ("customers") who place orders with Florist Mile End for delivery or pickup within Mile End and nearby districts. By ordering from us, you acknowledge and accept the data practices described in this document.

What Personal Data We Collect

When you interact with Florist Mile End and place an order, we may collect the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and telephone number.
• Order Details: Products purchased, delivery preferences, gift card messages, and special instructions.
• Payment Data: Transaction identifiers (we do not store your full payment card details; payment processing is handled securely by third-party processors).
• Communications: Records of your correspondence and any feedback you provide.
• Device Data (if you order online): IP address and browser type, collected in line with cookie preferences for basic website functionality and security.

Lawful Basis for Processing Personal Data

We process your personal data in accordance with GDPR under the following lawful bases:

• Contract: Most of the information we collect is necessary to fulfill your order, process payments, and provide customer support. Without this data, we cannot complete your transaction or deliver flowers.
• Legal Obligation: We retain certain data to comply with legal and tax obligations, such as maintaining appropriate business records.
• Legitimate Interests: We may use your data for legitimate business interests, such as preventing fraud or improving business processes, provided this does not override your fundamental rights and freedoms.
• Consent: We may rely on your explicit consent for specific purposes, such as sending you marketing material. You can withdraw your consent for these activities at any time.

How We Use Your Data

Your data is used strictly for the following purposes:

• Processing and delivering your flower order, including handling payment and arranging delivery or pickup.
• Communicating order status, changes, or issues related to your purchase.
• Responding to your enquiries, requests, or feedback.
• Complying with legal, regulatory, and tax requirements.
• Improving our products, services, and website based on feedback and user interaction (where applicable).
• Sending service-related notifications. Marketing communications will only be sent with your consent and can be opted out of at any time.

Data Retention: How Long We Keep Your Information

Your personal data is retained for no longer than is necessary for the purposes set out in this policy. Typically, order and transaction information is kept for up to seven years to comply with financial and legal requirements. Data used for marketing will be stored until you withdraw consent or unsubscribe, after which it is promptly deleted. Communication records are retained for a reasonable period to address ongoing queries or disputes.

Our Data Processors and Third-Party Services

Florist Mile End engages trusted third-party service providers ("processors") who process personal data on our behalf. These include:

• Payment processing companies: Securely handle your payment transactions. We do not retain your full payment card details.
• Delivery partners: May receive contact and order details to fulfil deliveries, where applicable.
• IT service providers: Support our website and order management systems, ensuring data security and functionality.

All processors are contractually required to handle your data in compliance with GDPR, use it only for the instructed purpose, and maintain appropriate security measures. We do not sell or allow the commercial use of your personal information by any third parties.

Your Data and Your Rights

Under GDPR, you have important rights in relation to your personal data held by Florist Mile End:

• Right to Access: You can request confirmation of what personal data we hold about you and obtain a copy.
• Right to Rectification: If any information is incomplete or inaccurate, you may request correction.
• Right to Erasure: You may request deletion of your data when we have no legal reason to retain it.
• Right to Restriction: You can ask us to restrict the processing of your data under certain circumstances.
• Right to Object: You can object to processing based on legitimate interests or direct marketing at any time.
• Right to Data Portability: In applicable cases, you can ask us to provide your data in a structured, commonly-used format.

If you wish to exercise any of these rights, please contact us using the methods described when placing your order. To protect your privacy, we may require verification of your identity before fulfilling your request.

Security Measures

We prioritise your data security and take robust steps to protect your personal data from loss, misuse, unauthorised access, and disclosure. Security measures include access controls for staff, encryption for sensitive data transactions, and regular security assessments for our digital infrastructure. While we strive to protect all information, no method of transmission or storage is completely secure; nevertheless, we constantly review and update our practices to address emerging threats.

Policy Updates

From time to time, we may update this Privacy Policy to reflect changes in applicable laws or our practices. The most recent update date will be shown at the top of the policy. We encourage customers to review this page periodically to remain aware of how your data is being managed.

Questions and Further Information

For enquiries about this policy or how your data is handled at Florist Mile End, please use the contact methods provided when you place your order. We aim to address all concerns and facilitate the exercise of your data protection rights promptly and transparently.