Data Privacy for Florist Leytonstone Customers and Orders

Florist Leytonstone Privacy Policy

Introduction

This Privacy Policy outlines how Florist Leytonstone collects, processes, uses, and safeguards your personal data. This policy applies to all customers placing orders with Florist Leytonstone from Leytonstone and the surrounding districts. We are committed to respecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (GDPR).

Types of Data We Collect

When you place an order or otherwise interact with Florist Leytonstone, we may collect the following types of personal data:

Identity Information: Name, and, if placing an order for delivery, recipient's name.
Contact Information: Address, delivery address (if different), phone number (where provided), and any specific instructions relating to your order.
Order Details: Products ordered, order notes, delivery preferences, order value, and transaction details (excluding payment card data; see further below).
Communication Data: Customer queries, complaints, feedback, and correspondence.
Technical Data: IP address, device information, browser information, and usage activity, if interacting with our website.

Lawful Basis for Processing Personal Data

Florist Leytonstone processes your personal data only when we have a valid lawful basis under the GDPR. These are:

Contractual necessity: To process, fulfill, and manage your order and delivery, and to provide related customer service.
Legal obligations: To meet requirements under the law (for example, record-keeping for tax purposes).
Legitimate interests: For purposes such as customer service quality review, prevention of fraud, and operational efficiency, provided these do not override your rights and freedoms.
Consent: In cases where we market directly to you by email, SMS, or other channels, or where you have opted in to receive offers and updates. You may withdraw your consent at any time.

How We Use Your Data

Florist Leytonstone uses your data for the following purposes:

Processing and delivering your flower order, including contacting you or the recipient if necessary.
Communicating with you about your order, queries, or complaints.
Improving our services through analysis of customer feedback and activity.
Fulfilling our legal, accounting, and tax requirements.
Sending you marketing communications if you have opted in.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including fulfilling your order and complying with any legal, accounting, or reporting obligations. Generally, customer order and delivery data is retained for up to seven years to meet legal and financial requirements. If you have subscribed to receive marketing communications, we will retain your contact information until you unsubscribe or withdraw your consent. Where personal data is no longer needed, it is securely deleted or anonymized.

Processors and Sharing of Data

Florist Leytonstone may engage third-party service providers to help facilitate orders, payments, deliveries, and IT operations. These service providers act as data processors under contractual obligations that require them to protect your data and use it solely to provide agreed services on our behalf. Categories of processors may include:

Order and delivery management platforms
Payment processing services (note: Florist Leytonstone does not store your card details)
IT hosting and support
Marketing and communications partners (where you have consented)

We do not sell or lease your personal data to third parties. Personal data is only shared outside Florist Leytonstone where necessary for order fulfillment, legal requirements, or with your explicit consent. Where required, data is processed within the UK or European Economic Area. If data is transferred outside these regions, we ensure adequate protection as required by law.

Your Data Protection Rights

Under the GDPR, you have a number of rights in relation to your personal data. These include:

Right to Access: You can request access to the personal data we hold about you.
Right to Rectification: You can ask us to correct or complete inaccurate or incomplete data.
Right to Erasure: In certain circumstances, you can ask us to delete your personal data ("right to be forgotten").
Right to Restrict Processing: You can request we restrict how we process your data in certain situations.
Right to Data Portability: You can request a copy of your personal data in a structured, commonly used format for transfer to another provider.
Right to Object: You may object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.

If you would like to exercise any of these rights, please contact us using the details made available during your order or via our website. We may need to verify your identity before we fulfill your request.

Children’s Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children, except where it is unavoidable to fulfill an order (e.g., as a delivery recipient). If you believe we have collected a child's data in error, please contact us for prompt removal.

Data Security

We employ appropriate technical and organizational measures to keep your data secure, protecting it against unauthorized or unlawful processing, accidental loss, destruction, or damage. These include access controls, encrypted databases, and secure payment processes handled by certified third parties.

Changes to Our Privacy Policy

We may review and update this policy from time to time. Changes will be posted within our channels, and the date of the most recent update will be indicated here. Please revisit this policy periodically to stay informed about how we protect your information.

Contacting Florist Leytonstone

If you have questions or concerns about this Privacy Policy or how your data is handled, please reach out to us through the contact options provided when you place your order or via our website. We are committed to addressing your concerns and protecting your privacy in line with applicable data protection regulations.