Walworth Florist Privacy Policy

Name: TROPIC GETAWAY
Brand: Walworth Florist
Price: 64.00 GBP
Availability: InStock

Introduction

This Privacy Policy provides comprehensive information about how Walworth Florist collects, uses, and secures your personal data. It applies to all customers placing Walworth Florist orders from Walworth and surrounding districts. Our commitment to your privacy aligns with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

What Data We Collect

We collect data necessary to fulfill your order and provide a quality service. The types of personal data we may collect include:

Personal identification: Names, addresses (recipient and sender, where applicable), and contact phone numbers.
Order information: Purchase details, order history, delivery preferences, and occasion details (such as birthday or anniversary if provided).
Payment information: Payment method details. (Note: Sensitive payment data such as card numbers are only processed by secure third-party payment providers; we do not store card details ourselves.)
Communication records: Records of your communication with us, such as feedback, queries, or complaints.

Please note: We only collect data necessary for processing your order and communicating with you. We do not knowingly collect data from children under 16 years old.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful reason for processing your personal data. The lawful bases upon which we process your data are:

Contractual necessity: We require certain information to process and deliver your order, as set out in our contract with you.
Legitimate interests: We may use your data to communicate with you about your order and to improve our services, provided it does not override your rights and freedoms.
Legal obligation: In specific circumstances, we may process data to comply with a legal or regulatory requirement, such as record-keeping for tax purposes.
Consent: Where required, such as for email marketing (only if you opt in), we will obtain your explicit consent before processing data for that purpose. You may withdraw consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

Fulfilling and managing your orders, including handling payments and arranging deliveries.
Providing customer support and responding to inquiries.
Maintaining records for accounting and legal compliance.
Improving our products, services, and customer experience.
Communicating with you about your order status or delivery updates.
With your consent, sending you updates, promotions, or marketing (if you have chosen to receive these).

Retention of Your Data

We only retain your personal data for as long as it is necessary for the purposes stated above:

Order and transaction records: Retained for up to 7 years to comply with legal and accounting requirements.
Customer support communications: Generally kept for 2 years from the date of last contact to resolve queries and trace any follow-up issues.
Marketing preferences: Retained only while you are subscribed or until you withdraw consent.

After these periods, your personal data is securely deleted or anonymised unless longer retention is required by law.

Processors and Data Sharing

We use trusted third-party processors to help us provide our services. The types of processors we may use include:

Payment service providers to securely process card payments.
Delivery and courier services to deliver your orders.
IT and system providers for order management and secure data storage.

We only share data with these processors necessary for them to perform their services and ensure they are GDPR-compliant. Processors are contractually bound to use your data only as instructed by Walworth Florist and to maintain its confidentiality and security.

Your data is not sold or shared with third parties for unrelated marketing purposes. We may share personal data if required by law, for example with regulatory authorities or in response to legal requests.

How We Protect Your Data

We implement appropriate organisational and technical measures to safeguard your personal data. These include encryption, secure servers, restricted access, and staff training to ensure best practices in data protection.

Whenever we use third-party processors, we ensure they commit to robust data security measures. We periodically review and update our safeguards to address new risks and technologies.

Your Rights under the GDPR

You have several rights regarding your personal data, including:

Right to access: You may request access to the personal data we hold about you.
Right to rectification: You can request corrections to inaccurate or incomplete data.
Right to deletion: You may ask us to erase personal data no longer necessary for our processing activities.
Right to restrict processing: You can request a restriction on how your data is processed under certain circumstances.
Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to data portability: Where applicable, you may request the transfer of your data to another provider.
Right to withdraw consent: If data processing is based on your consent, you may withdraw this at any time.

If you wish to exercise your rights, please contact us through the contact methods published on our website. We will handle your request in line with GDPR requirements.

Updates to this Privacy Policy

We may update this policy occasionally to reflect changes in our data practices or legal obligations. The latest version will always be published on our website and we encourage you to review it from time to time.

Contacting Us

If you have questions or concerns regarding your personal data or this Privacy Policy, please use the contact details found on our website. We will respond promptly in accordance with our obligations.