Florist Archway Privacy Policy for Customers

Privacy Policy Overview

Your privacy is important to Florist Archway. This Privacy Policy explains how we collect, use, store, and protect your personal information when you place orders with Florist Archway from Archway and surrounding districts. It outlines your rights under the UK General Data Protection Regulation (GDPR). This policy applies to all customers placing orders for our products and services and seeking deliveries or collections in Archway and neighbouring areas.

What Data We Collect

When you interact with Florist Archway, we collect only the personal data necessary to fulfil your order and provide excellent customer service. The types of data we may collect include:

• Identification Data: Your name and, if relevant, recipient's name
• Contact Data: Your billing and delivery address, telephone number
• Order Details: Items ordered, delivery preferences, order notes
• Payment Data: Details necessary to process your payment (though we do not store card numbers or payment credentials directly)
• Communication Data: Any messages or correspondence exchanged with us
• Technical Data: IP address, browser type, device information (if ordering via our website)

We do not intentionally collect or process sensitive personal data (special category data) in the course of standard order processing.

Lawful Basis for Processing

Florist Archway processes your personal data on the following lawful grounds, as defined by the GDPR:

• Contractual Necessity: We need your personal information to process and deliver your order, to contact you about your order, or to fulfil any service you request from us.
• Legal Obligation: We may be required to retain certain data to comply with UK tax, accounting, or regulatory obligations.
• Legitimate Interests: We process your data in our legitimate interests to operate our business efficiently, such as improving our services, maintaining customer records, or analysing purchasing trends, provided these interests are not outweighed by your data rights.
• Consent: Where necessary (for example, to send marketing communications), we rely on your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

Your data is used only for the purposes outlined below:

• To process, confirm, and deliver your orders
• To communicate with you about your purchases and respond to your requests
• To improve our products, services, and customer experience
• To comply with applicable laws and regulations
• To send you service-related notifications, updates, or, with your consent, occasional marketing information about our offerings

We do not sell or rent your personal data to third parties.

How Long We Retain Your Data

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Order and customer records: Retained for up to 6 years to comply with UK tax regulations and in case of queries regarding any past transactions.
• Marketing preferences: Retained until you withdraw your consent or opt out.
• Electronic communications: Retained for up to 2 years after your latest contact with us, unless required longer by law.

Once retention periods lapse, your data will be securely deleted or anonymised.

Processors and Data Sharing

To provide our products and services, Florist Archway uses trusted third-party service providers ("processors") who process your personal data on our behalf and according to our instructions. These may include:

• Payment processing providers
• Order management and delivery services
• IT and website support suppliers
• Email and communications platforms
>

All processors are chosen for their compliance with UK data protection law, and each is bound by contract to protect your data and not use it for purposes other than fulfilling Florist Archway's services. We do not transfer your personal data outside the United Kingdom except where such transfers are lawful and protected by appropriate safeguards.

Your Rights Under GDPR

You have several important rights regarding your personal data. These include:

• Right to be informed: You have the right to be told how your data is collected and used (as outlined in this privacy policy).
• Right of access: You can request details of the personal data we hold about you.
• Right to rectification: You may ask us to correct or complete any inaccurate or incomplete data.
• Right to erasure: You can request deletion of your data when it is no longer required, provided a lawful exemption does not apply.
• Right to restrict processing: You may ask us to restrict how we use your information in certain circumstances.
• Right to data portability: You can request that your data be supplied to you or to another provider in a machine-readable format, where technically feasible and legally permissible.
• Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Rights regarding automated decision-making: Florist Archway does not use automated decision-making or profiling that produces legal effects concerning you.

If you wish to exercise any of your rights under data protection law, please contact us using the contact details provided on our website or in your customer documentation. We will respond to your request as required by law, typically within one month.

Security of Your Data

Florist Archway takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or loss. These include secure payment processing, encrypted connections for online transactions, restricted staff access, and regular data privacy training for our team.

Policy Updates

This Privacy Policy may be updated from time to time to reflect legal developments or changes in the way we manage personal information. The most current version will always be available, and significant changes will be communicated where appropriate.

Contact and Complaints

If you have any questions about this Privacy Policy, how we process your data, or if you wish to exercise any of your rights or raise a concern, please refer to our website's contact page. You also have the right to lodge a complaint with the UK Information Commissioner's Office about the way we handle your personal information.

We are dedicated to ensuring your privacy and will address any concerns as swiftly and transparently as possible.