Archway Florist GDPR Privacy Policy

Introduction

This Privacy Policy outlines how Archway Florist processes and safeguards your personal information in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Archway Florist from Archway and the surrounding districts. By using our services, you acknowledge and agree to the practices described herein.

What Data We Collect

To fulfil your order and provide a seamless customer experience, we collect specific information. The categories of data we gather include:

• Contact Information: Name, delivery address, email address, and telephone number.
• Order Details: Information about the products or services you request, including recipient details for deliveries.
• Payment Information: Payment card information is processed via a secure third-party payment processor. Archway Florist does not store your full card details.
• Communication Records: Any correspondence you have with us related to orders, complaints, or feedback.
• Technical Data: Limited website usage data such as IP addresses, browser type, and device information, collected via essential cookies solely for functionality and security purposes.

Lawful Basis for Processing Your Data

Archway Florist processes your personal data under the following GDPR lawful bases:

• Contractual Necessity: We use your information to process and deliver your order as requested.
• Legal Obligation: We retain certain information to comply with legal requirements, such as financial records for tax and accounting.
• Legitimate Interests: We may use your data to enhance your customer experience, improve our services, prevent fraud, and resolve disputes, provided these interests are not overridden by your rights and interests.
• Consent: On rare occasions, and only when necessary (for example, for direct marketing communications outside those related to your order), we will seek your explicit consent. You may withdraw your consent at any time.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. Broadly, data is retained according to the following rules:

• Order and Delivery Data: Retained for up to six years in line with accounting and tax laws.
• Communication Records: Held for up to two years to address queries or disputes.
• Technical Data: Retained for a maximum of one year to maintain and secure our systems.

Your data will be securely deleted or anonymized when it is no longer needed for the intended purposes.

Data Processors and Third Parties

We may share aspects of your data with trusted third-party service providers, known as processors, who help us provide our services. This includes:

• Payment processing companies for secure transaction handling.
• Delivery partners for accurate and timely delivery of your floral orders.
• IT support, software providers, and hosting partners necessary for the operation of our website and business management.

We ensure all processors operate in compliance with GDPR, processing your data only as instructed by us and with appropriate technical and organizational safeguards. Your data is not transferred outside the European Economic Area (EEA) unless adequate protection is in place.

Your Rights Under GDPR

As a customer, you have several rights regarding your personal data under the GDPR. These include:

• The right to be informed: Clear information about how we process your data (as set out in this policy).
• The right of access: You can request a copy of any personal data we hold about you.
• The right to rectification: If your data is incorrect or incomplete, you may ask us to correct it.
• The right to erasure: You may request deletion of your data, subject to certain legal requirements.
• The right to restrict processing: You may limit how we use your data in certain circumstances.
• The right to data portability: You can request your data be provided to you or another controller in a structured, commonly-used format where applicable.
• The right to object: You can object to processing based on legitimate interests or direct marketing at any time.
• Rights regarding automated decision-making: Archway Florist does not make decisions based solely on automated processing that significantly affect you.

To exercise these rights, please contact us through our store or business address. We will respond to all requests as required by law and may request proof of identity to ensure your data privacy.

Security of Your Information

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. These include secure storage, staff training, restricted access, and the encryption of sensitive information during transmission where relevant. We regularly review our security practices and strive to maintain the highest standards.

Policy Updates

This Privacy Policy is reviewed periodically and may be updated to reflect changes in our practices, legal obligations, or for operational reasons. Updated versions will be made available in-store and on our website. We encourage customers to review this policy regularly.

Contact and Complaints

If you have questions about this policy or wish to make a complaint about how your personal data has been handled, please contact us using our main business address in Archway. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.

Scope of This Privacy Policy

This policy applies to all customers placing orders with Archway Florist located in Archway and the surrounding districts. By using our services, you acknowledge that you have read and understood this Privacy Policy.