Florist Mortlake Privacy Policy

Introduction

At Florist Mortlake, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, store, and protect your data when you place orders with us from Mortlake and surrounding districts. Our practices are designed to comply with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

Who This Policy Applies To

This Privacy Policy applies to all customers of Florist Mortlake who place orders for delivery or collection in Mortlake and the surrounding districts. By using our services, you agree to the terms described in this policy.

What Data We Collect

When you interact with Florist Mortlake, we collect a variety of personal data to facilitate your orders, communicate with you, and improve our service, including:

• Contact Information: such as your name, delivery address, phone number, and (if applicable) any additional recipient details.
• Order Details: including the products you order, purchase history, delivery instructions, and payment information.
• Communication Records: such as email correspondence and, where relevant, feedback or inquiries you make to us regarding your order.
• Technical Data: your IP address, device type, and browser type collected when you visit our website, to improve website functionality and security.

Lawful Basis for Processing Your Data

The GDPR requires us to have a valid lawful basis to process your personal data. Florist Mortlake processes your data under the following grounds:

• Performance of a Contract: Most of the data we collect is necessary to fulfill the contract of sale and delivery of goods to you.
• Legal Obligation: Certain records may be retained to meet legal or tax requirements.
• Legitimate Interests: We may process your data to improve our services, for fraud prevention, or for direct marketing purposes (where permitted by law).
• Consent: Where you have provided specific consent, for example, to receive promotional messages that are not strictly necessary for completing your order. You are free to withdraw your consent at any time.

How We Use Your Personal Data

Your personal information is used for the following purposes:

• Processing and delivering your flower orders.
• Contacting you regarding your orders or in response to your inquiries.
• Improving and personalising our products and services to better suit your needs.
• Maintaining our business records in accordance with legal and regulatory obligations.
• Sending service-related updates or, where you have agreed, marketing communications.
• Ensuring the security and integrity of our website and services, including fraud prevention.

Who Accesses Your Data (Processors and Third Parties)

We may share your personal data with trusted third parties to help us deliver our services to you. These may include:

• Payment Service Providers: To securely process your payment information.
• Delivery and Courier Partners: To ensure prompt and accurate delivery of your orders.
• IT and Cloud Service Providers: For website hosting, email, customer management, and system support.
• Professional Advisors: Such as accountants or legal advisors, where necessary to comply with our legal or regulatory obligations.

All our data processors are required to process your data in accordance with GDPR and to keep your data safe and secure. We do not sell or rent your personal data to any third party.

International Data Transfers

Generally, your data is stored within the UK or European Economic Area (EEA). If it is ever necessary to transfer your data outside of these regions, appropriate safeguards will be put in place as required by GDPR, such as standard contractual clauses or reliance on providers with adequate protection mechanisms.

How Long We Keep Your Data (Retention Policy)

Florist Mortlake only retains your personal data for as long as necessary to fulfill the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain customer and order information for up to seven years in line with financial regulations and to facilitate repeat orders. Marketing consent and preferences are kept until you revoke consent or ask us to delete your data.

Your Rights Under GDPR

Under GDPR, you have a number of important rights regarding your personal data. You may:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of any inaccurate or incomplete information.
• Erasure: Request that we delete your data where there is no good reason for us to continue processing it.
• Restriction: Ask us to suspend the processing of your data in certain circumstances.
• Data Portability: Request the transfer of your personal data to you or to another organisation.
• Object: Object to processing of your data where we rely on legitimate interests or direct marketing.
• Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, or if you have any questions or concerns about your personal data, you can contact us using the details provided in this policy or on our website.

Data Security

We take the security of your personal information very seriously. Appropriate security and organisational measures are in place to protect your data from unauthorised access, disclosure, alteration, or loss. Our staff and processors are trained in data protection and are required to adhere to strict confidentiality obligations.

Changes to This Privacy Policy

Florist Mortlake may update this Privacy Policy from time to time to ensure ongoing compliance with legal requirements or to reflect changes in our business practices. The latest version will always be available on our website. Please check this page periodically for updates.

Contact and Complaints

If you would like to exercise any of your data rights, ask questions, or make a complaint regarding your data, please contact us using the details found on our website. If you are not satisfied with our response, you may also lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.

This Privacy Policy was last updated in June 2024.