Your Data and Privacy at Florist Penge

Florist Penge GDPR Privacy Policy

Introduction

This Privacy Policy explains how Florist Penge collects, uses, stores, and protects your personal data when you place orders as a customer in Penge and surrounding districts. We are committed to ensuring that your privacy is protected and that your personal information is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

Scope of this Policy

This Privacy Policy applies to all individuals who place orders with Florist Penge, whether online, by telephone, or in person, where the delivery address is located in Penge or its neighboring areas. By placing an order, you acknowledge the terms of this policy.

What Data We Collect

When you use our services or interact with us as a customer, Florist Penge may collect the following categories of personal data as relevant to the processing of your order:

Identity Data: Your full name and, if necessary, the name of the recipient of the floral order.
Contact Data: Address for delivery, phone number, and any alternative contact details you provide.
Order and Transaction Data: Details about the products you have ordered, delivery instructions, and purchase history.
Payment Data: Payment method details (note: payment details are processed securely by our payment service providers and are not stored by us).
Communication Data: Records of communications, including order confirmations, feedback, and any correspondence between you and Florist Penge.
Technical Data: When you use our website, we may automatically collect anonymised technical data such as IP address, browser type, and device information for the purpose of site operations and security. These do not identify you as an individual.

Lawful Basis for Processing Your Data

Florist Penge will only collect and process your personal data where we have a valid, legal basis to do so under GDPR. The primary lawful bases include:

Contractual Necessity: We collect and use your data to fulfill our contract with you, such as processing and delivering your floral order.
Legal Obligation: We may be required to process your information to comply with legal and regulatory requirements.
Legitimate Interests: Where appropriate, we may use your data to improve our services, prevent fraud, and ensure the security of our operations, provided that these interests are not overridden by your rights and interests.
Consent: In certain cases, such as sending promotional communications, we will ask for your explicit consent, which you may withdraw at any time.

How We Use Your Information

Your personal data is used for the following purposes:

To process, confirm, and deliver your order
To communicate with you regarding your order or to respond to your enquiries
To manage payments and refunds
To improve the quality of our products and services
To comply with regulatory requirements and prevent fraudulent activities
With your consent, to send information about special offers, new products, or other news relevant to Florist Penge

How Long We Keep Your Data (Data Retention)

Florist Penge will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typically:

Order records and associated customer contact information are retained for up to 6 years, in accordance with statutory record-keeping obligations.
Communications and correspondence related to orders may be kept up to 3 years from the last interaction.
Where you have provided consent for marketing, we will retain your data until you withdraw your consent.

At the end of the retention period, your personal data will be securely deleted or anonymised.

Processors and Sharing of Your Data

Florist Penge uses selected third-party service providers (“processors”) to help fulfil your orders and manage our business operations. We require all such processors to respect the security of your personal data and to treat it in accordance with the law. These processors include:

Payment service providers who process your payments securely
Delivery and courier services responsible for the delivery of orders
Service providers for website hosting, IT support, and communications

We do not sell, rent, or share your personal information with unaffiliated third parties for marketing purposes. We may disclose your information to law enforcement or regulatory authorities if required by law.

Your Rights Under GDPR

As a customer of Florist Penge, you have the following rights regarding your personal data:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You may ask us to correct any inaccuracies or incomplete data.
Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data in certain situations.
Right to Restrict Processing: You may ask us to restrict the processing of your data under specific circumstances.
Right to Data Portability: Where applicable, you can have your data transferred to another service provider.
Right to Object: You can object to our processing of your data based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where we process your data based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact methods provided at the end of this policy. We may need to verify your identity before fulfilling your request.

Data Security

We are committed to keeping your personal data secure. Florist Penge uses appropriate physical, electronic, and managerial measures to protect the information we collect. Access to your data is restricted to authorised personnel only and our third-party processors are contractually obligated to maintain data security and confidentiality.

Updates to this Policy

Florist Penge may update this Privacy Policy from time to time to reflect changes in regulation, our practices, or our services. Any changes will be posted in this document with the updated revision date. We encourage you to review this page periodically to stay informed about how we protect your personal data.

Contact and Further Information

If you have any questions about this Privacy Policy, your rights, or how Florist Penge uses your personal data, please use the contact details provided on our website to get in touch. We will respond to your enquiry as soon as possible.