Florist Hampton Hill Privacy Policy
Policy Overview
This Privacy Policy explains how Florist Hampton Hill collects, uses, shares, stores, and protects your personal data when you place an order for our products or services in Hampton Hill and the surrounding districts. This policy is designed to ensure compliance with the EU General Data Protection Regulation (GDPR) and UK data protection laws. By placing an order with us, you agree to the terms described here.
Scope of This Policy
This Privacy Policy applies to all customers who place orders with Florist Hampton Hill, whether through our website, in person, or by telephone, provided the order is for delivery or collection within Hampton Hill and the surrounding districts.
What Personal Data We Collect
When you place an order with Florist Hampton Hill, we may collect the following categories of personal data, depending on your order and method of interaction:
- Identity Data: Name, title.
- Contact Data: Delivery address, billing address, phone number, and occasionally email address.
- Order Information: Product and delivery preferences, recipient details, card/gift messages.
- Payment Data: Limited payment information (such as payment method, last four digits of a card number), though we do not store full payment card details as these are processed securely by third-party providers.
- Technical Data: IP address, browser type and version, time zone setting, and other technology on the devices you use to access our website.
- Communication Data: Any correspondence you send to us (such as feedback, reviews, or customer support queries).
Lawful Basis for Processing Personal Data
We process your personal data based on the following lawful grounds as defined by the GDPR:
- Contractual necessity: To fulfil your order, deliver flowers and related services, and process payments.
- Legitimate interests: To communicate with you about your order, manage our relationship, improve our services, and ensure the security of our website and business operations. We ensure that our legitimate interests do not override your fundamental rights.
- Legal obligation: To comply with UK and EU legal and tax requirements.
- Consent: Where required, we will obtain your explicit consent before processing your data for marketing or promotional purposes. You may withdraw this consent at any time.
How We Use Personal Data
We use your personal data to:
- Process and deliver your order, including sending order confirmations and communications about delivery status;
- Handle payments and refunds;
- Respond to your queries and provide customer service;
- Ensure the security of our website and prevent fraud;
- Comply with legal and regulatory obligations;
- Improve our products and services through analysis and feedback.
We do not use your data for automated decision making that would have a legal or significant impact on you.
Disclosure and Data Processors
We may share your personal data with trusted third-party processors, strictly for the purposes of facilitating your order or as required by law. Our processors include:
- Payment service providers: To securely process your payment details.
- IT and website service providers: For website hosting, email communication, and order management systems.
- Delivery partners: To ensure accurate and timely delivery of your order.
- Professional advisors and legal authorities: When necessary to comply with our legal obligations, resolve disputes, or enforce our contractual agreements.
All third-party processors are contractually required to respect the confidentiality and security of your data, and to handle it strictly in accordance with the GDPR and our instructions.
International Data Transfers
Your data is generally processed within the UK or European Economic Area (EEA). In cases where data may be transferred outside the EEA, we ensure measures are in place (such as Standard Contractual Clauses) to protect your data to the standards required by applicable data protection law.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including orders, legal, regulatory, tax, accounting, or reporting requirements.
- Order and transaction records: Typically retained for seven years to comply with legal obligations.
- Customer communications: Retained for up to two years after your last interaction, unless required for legal reasons.
- Marketing preferences: Retained until you withdraw your consent or request erasure.
When retention periods expire, your data is securely deleted or anonymised.
Your Rights Under GDPR
As a customer in Hampton Hill or surrounding districts, you have specific rights regarding your personal data. These include:
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate data.
- Right to erasure: Request deletion of your data where there is no longer a legitimate reason for processing.
- Right to restriction: Request limitation of processing in certain circumstances.
- Right to data portability: Request transfer of your personal data to another provider.
- Right to object: Object to our processing of your data on grounds relating to your particular situation or to direct marketing activities.
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.
- Right to complain: Lodge a complaint with a supervisory authority if you believe we have infringed your data protection rights.
We will respond to your requests in accordance with applicable data protection laws, normally within one month. Some rights may not be absolute and can be subject to certain legal conditions or exemptions.
Data Security
Florist Hampton Hill takes the security of your personal data very seriously. We implement appropriate technical and organisational measures to prevent unauthorised access, misuse, alteration, or loss of your information. Although we take reasonable steps to secure your data, please remember that no service can be completely secure and you should take care when providing your details online.
Changes to This Privacy Policy
We may occasionally update this Privacy Policy to reflect changes to our practices, legal requirements, or for other operational reasons. Updates will be posted on our website and the date of revision noted at the top of the policy. We encourage you to review the policy regularly.
Contact and Queries
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the platforms or methods listed on our website. We are committed to resolving your privacy concerns promptly and fairly.