Wanstead Florist Privacy Policy

Introduction

At Wanstead Florist, we value your privacy and are committed to protecting your personal data in compliance with the UK General Data Protection Regulation (GDPR) and all relevant data protection laws. This Privacy Policy explains in detail what personal data we collect about our customers placing orders with Wanstead Florist in Wanstead and the surrounding districts, how we process it, the lawful bases for doing so, how long we retain it, and your rights. Please read this policy carefully to understand how we safeguard your information and your choices regarding your data.

Scope of Policy

This Privacy Policy applies to all individuals who place orders with Wanstead Florist, whether online, by telephone, or in person, covering customers from Wanstead and surrounding districts. It concerns personal data you provide when ordering flowers and related products, and any subsequent communication in connection to these orders.

What Data We Collect

Wanstead Florist collects only the personal data necessary to fulfil your floral order and provide excellent customer service. The key categories of personal data we may collect include:

• Identity Data: Your name, and, when applicable, the recipient’s name
• Contact Data: Delivery address, contact telephone number, and, if provided, your email address
• Order Information: Details of your floral order, preferences, personalized messages, and any delivery instructions
• Payment Information: Transaction details such as amount, payment method, and billing address (note: we do not retain full payment card details after processing the payment)
• Communication Data: Records of communications relating to your order, such as enquiries or complaints

We do not intentionally collect special category data (such as health information) or information about children. If you provide data about another person (such as a recipient), you must have their permission to do so.

Lawful Basis for Processing

Wanstead Florist will only process your personal data where we have a lawful basis for doing so according to Article 6 of the GDPR. The primary lawful bases we rely upon are:

• Contractual Necessity: We process your data to fulfil contracts with you when you place an order with us; for example, to deliver flowers to the specified address and communicate regarding the order’s progress.
• Legal Obligation: We may process data to meet record-keeping or other legal obligations required by UK law (such as for accounting purposes).
• Legitimate Interests: Occasionally, we may process data as necessary for our legitimate interests, for example, to respond to customer enquiries, improve our services, or prevent fraud, provided these interests are not overridden by your rights and interests.

How We Use Your Data

Your data is used strictly for the purposes stated above. Typical uses include:

• Processing and delivering your floral order, including managing payments and arranging delivery
• Communicating with you regarding your order status or in response to your enquiries
• Record-keeping for accounting and auditing
• Complying with our legal obligations
• Responding to feedback, complaints, or reviews
• Enhancing the security and effectiveness of our services

Data Processors and Sharing

We may share your personal data with trusted third-party service providers who help us operate our business. These include:

• Payment processors for handling card transactions securely
• Delivery partners who assist in the fulfilment and delivery of your order
• IT providers supporting our ordering systems and databases
• Professional advisors such as accountants or legal counsel (where necessary)

We ensure all processors only act on our instructions and provide sufficient guarantees regarding the security of your personal data. Wanstead Florist does not sell, rent, or trade your data with third parties for marketing purposes.

Your data is not routinely transferred outside the United Kingdom. If a transfer becomes necessary (e.g., for technical support), we will ensure appropriate safeguards are in place in accordance with UK data protection law.

Retention of Personal Data

Wanstead Florist retains your personal data only for as long as necessary to fulfil its intended purpose, comply with legal obligations, or resolve disputes. Generally, this means:

• Order Information: Kept for up to 6 years for financial, warranty, and record-keeping purposes as per statutory requirements
• Communication Data: Retained for up to 3 years, unless continued retention is necessary for ongoing support or dispute resolution
• Payment Data: We do not retain your full card details beyond the time needed for transaction processing

Once data is no longer needed, it is securely erased or anonymised.

User Rights

You have a number of rights under the GDPR regarding your personal data:

• Right to Access: You can request confirmation of what data we hold about you and obtain a copy.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you can request deletion of your data (for example, if it is no longer needed for original purposes or if you withdraw consent where applicable).
• Right to Restriction: You can request restriction of processing in specific circumstances.
• Right to Object: You may object to the processing of your data on grounds relating to your particular situation, where processing is based on legitimate interests.
• Right to Data Portability: Where processing is carried out by automated means based on consent or contract, you can request to receive your data in a commonly used format.
• Right to Lodge a Complaint: You have the right to complain to the Information Commissioner’s Office (ICO) or your local supervisory authority if you believe your rights have been infringed.

To exercise your rights, please contact us through your usual communication channel with Wanstead Florist. We will respond to all legitimate requests within one month, and sooner wherever possible.

Data Security

We take the security of your personal data seriously, employing technical and organisational measures to protect it against unauthorised access, accidental loss, or destruction. These measures include access controls, encryption where appropriate, and regular staff training on privacy principles and procedures.

Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes in the law or our business practices. Please check periodically for updates. Significant changes will be highlighted wherever possible at the point of order or on our website.

Contact and Further Information

If you have questions, comments, or concerns about this Privacy Policy or how we use your data, please contact Wanstead Florist through your usual communication channels. We are committed to addressing your queries promptly and transparently.