Dartford Florist - Privacy Policy
Introduction
Dartford Florist is committed to safeguarding your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy outlines how and why we collect, use, store, and protect your information. It applies to all individuals placing, enquiring about, or receiving orders via Dartford Florist within Dartford and the surrounding districts.
What Data We Collect
We collect the following categories of personal data to fulfill our service obligations and to ensure smooth processing of orders:
- Contact Details: Names, delivery addresses, and phone numbers of both senders and recipients.
- Order Information: Details about your order including floral selections, messages to recipients, delivery instructions, and purchase history.
- Payment Details: Debit/credit card information or other payment details provided at checkout (processed securely through trusted payment processors).
- Communication Records: Correspondence via online forms, order confirmations, and customer service interactions.
- Technical Data: Online identifiers such as IP address, device type, browser information, and cookies (where applicable and consented to for site operation and analytics).
Lawful Basis for Processing Data
We process your personal data in accordance with GDPR, relying on the following lawful bases:
- Performance of a Contract: To carry out our floral delivery services, fulfil your orders, process payments, and communicate relevant updates.
- Legal Obligations: To satisfy record-keeping, tax, or regulatory requirements.
- Legitimate Interests: For customer service improvement, fraud prevention, and analysis of purchasing trends, provided these do not override your fundamental rights and freedoms.
- Consent: Where required, such as for marketing communications or non-essential cookies, we seek your explicit consent, which can be withdrawn at any time.
Data Retention
Dartford Florist stores your personal data only as long as necessary to fulfil the purposes outlined in this policy:
- Order and Contact Information: Retained for up to six years for accounting and customer service purposes, unless a longer retention period is required by law.
- Payment Data: Card details are securely processed but not stored by Dartford Florist; instead, authorised third-party payment processors handle this information according to their legal obligations.
- Marketing Preference Data: Retained until you withdraw consent or unsubscribe from communications.
- Cookies and Technical Data: Retention depends on the cookie type and your consent. These are generally kept for analytical purposes and to enhance website functionality.
Use of Data Processors and Third Parties
To provide our services, Dartford Florist may engage carefully selected third-party service providers who act as data processors. This includes:
- Payment Providers: For secure payment processing and fraud prevention.
- Delivery Partners: To facilitate prompt and accurate floral delivery in Dartford and surrounding areas.
- IT and Hosting Providers: For website hosting, email communications, and customer management systems.
- Analytics Companies: For website analysis and improvement, using aggregated and anonymous data whenever possible.
All processors we use are contractually obliged to handle your data securely and in accordance with GDPR requirements. Data is not sold to third parties and is only shared for the purposes described in this policy.
Your Rights Under GDPR
As a Dartford Florist customer, you have the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
- Right to Erasure: Also known as ‘the right to be forgotten’, you can ask us to delete your data when it is no longer required for its original purpose and there is no other legal reason for its retention.
- Right to Restrict Processing: You may limit how your data is used in certain circumstances.
- Right to Data Portability: You can request your personal data in a machine-readable format for use elsewhere.
- Right to Object: You have the right to object to certain uses of your data, including direct marketing.
- Right to Withdraw Consent: Where processing relies on your consent, you may withdraw this at any time.
- Right to Lodge a Complaint: If you believe we have not handled your data correctly, you may contact your national data protection authority.
Data Security
We implement technical and organisational measures designed to protect your personal information from unauthorised access, loss, misuse, alteration, or disclosure. These include encrypted payment gateways, secure servers, and staff training in data protection principles. While we strive to maintain the highest security standards, no method of electronic storage or transmission is entirely infallible.
International Data Transfers
Dartford Florist primarily stores and processes data within the United Kingdom or the European Economic Area (EEA). Where we or our third-party processors transfer data outside these regions, we ensure that appropriate legal and technical safeguards are in place, such as Standard Contractual Clauses or equivalent measures, to protect your information.
Policy Scope and Updates
This Privacy Policy applies to all personal data collected from customers placing orders with Dartford Florist, including Dartford and adjacent districts served by us. We may update this Policy to reflect changes in our practices or legal obligations. Significant updates will be highlighted on our website with the date of the most recent revision.
Contact and Further Information
If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact us through our website's dedicated contact form or write to our Data Protection Officer by post at our registered business address. We will respond to your query as promptly as possible and within legal timeframes under the GDPR.
