How Florist Gants Hill Handles Your Personal Data

Florist Gants Hill Privacy Policy

Introduction

This Privacy Policy explains how Florist Gants Hill collects, uses, stores and protects your personal data when you place orders with us from Gants Hill or surrounding districts. We are committed to safeguarding your privacy and ensuring your personal data is handled in a lawful, fair and transparent manner in accordance with the General Data Protection Regulation (GDPR).

Scope and Applicability

This policy applies to all information collected from customers who place orders with Florist Gants Hill for deliveries within Gants Hill and the surrounding areas. By placing an order with us, you acknowledge and agree to the practices described in this Privacy Policy.

What Personal Data We Collect

We collect the following categories of personal data from our customers:

Contact details: Name, delivery address, billing address, and phone number
Order information: Items purchased, order notes, card messages
Payment information: Payment method details (e.g., last four digits of card, type of card). Please note, we do not store your complete payment card details. These are processed securely by third-party payment providers.
Communication records: Correspondence with you made via phone or in writing regarding your orders
Technical information: IP address, browser type, device information, only as required for processing orders and fraud prevention

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to process your personal data. Florist Gants Hill collects and processes your data under one or more of the following lawful bases:

Contractual necessity: To process and fulfil your order, including communicating with you about your order status and providing delivery services
Legal obligation: To comply with obligations such as record-keeping, accounting, or responding to valid legal requests
Legitimate interests: To improve our services, detect and prevent fraud, manage customer relationships, and conduct limited marketing (where permitted by law and balanced with your rights)
Consent: Where we specifically ask for your permission, for example, to send promotional emails or retain your data beyond the purposes listed above. You may withdraw your consent at any time.

How We Use Your Personal Data

Florist Gants Hill uses your personal data for the following purposes:

Processing your orders and payments
Arranging the delivery of your floral gifts
Contacting you with information or updates about your order
Providing customer support and managing customer queries
Maintaining proper business records
Complying with legal or regulatory requests or investigations
Improving the quality of our products and services
Sending you marketing communications with your explicit consent

How Long We Retain Your Data

We only keep your personal data for as long as necessary for the reasons for which it was collected. This generally means we will retain order and transaction records for up to seven years for accounting and legal purposes. Other data, such as customer service correspondence or marketing preferences, may be retained for as long as necessary to handle the relevant issues or until you withdraw your consent. Once the retention period has elapsed, we will securely erase or anonymise your personal data.

Third-Party Processors

To provide our services, we may need to share some of your personal data with trusted third-party service providers (“processors”) who act on our behalf. These may include:

Payment processing companies (to handle payments securely)
IT and website hosting providers
Delivery and logistics partners
Customer service software vendors

Each third-party processor is required by contract to follow our instructions and protect your data in line with GDPR requirements. They may only use your data for the specific purposes of providing services to Florist Gants Hill and are not permitted to use your data for their own benefit.

Your Rights Under the GDPR

Under the GDPR, you have rights concerning your personal data held by Florist Gants Hill, including:

Right to be informed: The right to know how your data is being used, which is detailed in this policy
Right of access: You may request a copy of the personal data we hold about you
Right to rectification: You can request corrections to your data if it is inaccurate or incomplete
Right to erasure: You may request deletion of your data when it is no longer necessary for the purposes collected, or if you withdraw consent
Right to restrict processing: You have the right to limit how we process your data under certain circumstances
Right to data portability: Where applicable, you can request a copy of your data in a commonly used format for transfer to another provider
Right to object: You can object to data processing on grounds relating to your particular situation, including for direct marketing
Rights related to automated decision-making: You have rights where a decision is made solely by automated means

To exercise any of your rights, please contact us using the details provided on our website or in your order records. We may need to verify your identity before fulfilling your request.

How We Protect Your Data

The security of your data is very important to us. We use a combination of physical, electronic, and organizational measures to keep your personal data safe from loss, misuse, unauthorized access, disclosure, alteration or destruction. These measures include secure server environments, strong password policies, limited access to data, and staff training in data protection and privacy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to keep it current with legal requirements and best practices. Revisions will be posted on our website with the date of the most recent update.

Contacting Florist Gants Hill

If you have questions, concerns or wish to exercise your rights regarding your personal data, please get in touch with us using the contact information provided in your order confirmation or on our official website. We are always happy to help and aim to respond promptly to all data protection queries.