Privacy Policy – Florist Chase Cross Customers

Scope of this Privacy Policy

This Privacy Policy outlines how Florist Chase Cross ("we", "us", "our") processes and protects your personal data when you place orders with us, whether online, by phone, or in-store, within Chase Cross and nearby districts. The policy applies to all customers and prospective customers who make use of our products and services in these areas.

What Personal Data We Collect

We may collect, use, store, and transfer different types of personal data about you, depending on your interactions with us, including:

• Identity Data: such as your full name, salutation, and title.
• Contact Data: including your address, delivery address, and in some cases, your telephone number.
• Order Information: details about floral orders, special instructions, occasion dates, and recipient information (such as their name, address, and message).
• Payment Data: transactional data relating to payment processing (Note: credit and debit card details are processed securely by our payment processor and are not stored by us).
• Correspondence: records of customer communications and feedback, including any information shared via contact forms or in-person enquiries.
• Technical Data: your IP address, browser type, time zone setting, and analytics data when you interact with our website.

Lawful Basis for Processing Personal Data

Our collection and use of your personal data is always in accordance with the UK General Data Protection Regulation (GDPR). We rely on the following lawful bases:

• Contract Performance: Processing your information is necessary to fulfill your order and deliver products as requested.
• Legal Obligation: We may retain certain details as required by tax, accounting, or other legislative frameworks.
• Legitimate Interests: To improve our services, ensure our business operations run smoothly, and communicate with you about your orders.
• Consent: We will request your explicit consent to send marketing materials or promotional offers, if applicable.

How We Use Your Data

Your personal information may be used for the following purposes:

• To process and deliver your order, including managing delivery arrangements and customer support.
• To communicate with you about order status, requests, and related customer service matters.
• To maintain our internal records in accordance with applicable regulations.
• To administer and protect our business and website (for example, data analysis, security, system maintenance).
• To ensure the flowers and gifts are delivered efficiently to you or your recipient of choice.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including meeting legal, accounting, or reporting requirements. In general:

• Order-related information is kept for up to 6 years to comply with tax and accounting obligations.
• Personal data related to correspondence or customer service enquiries is retained only as long as necessary for resolving queries and improving service.
• Data processed based on your consent (such as for marketing) will be retained until you withdraw your consent.

Processors and Data Sharing

To facilitate your orders and manage our business, we may share your data with trusted third-party service providers, including:

• Payment processors for secure handling of transactions.
• Delivery partners or couriers responsible for delivering flowers and gifts in Chase Cross and the surrounding zones.
• IT providers assisting with data storage, website management, analytics, and email services.

All third parties are required to respect the confidentiality and security of your data, acting only on our instructions and in compliance with GDPR.

We do not sell, rent, or lease your personal data to others. Personal data will not be transferred outside the UK or EEA unless appropriate safeguards are in place.

Your Rights as a Data Subject

Under the UK GDPR, you have the following rights regarding your personal data:

• Access: You may request access to the personal data we hold about you.
• Rectification: You have the right to ask us to correct any inaccurate or incomplete information.
• Erasure: You may request erasure of your data, where there is no legal basis for its continued processing.
• Restriction: You may request restriction of processing under certain circumstances.
• Objection: You can object to processing based on legitimate interests or to direct marketing.
• Data Portability: You may request the transfer of your data to you or to another data controller, where technically feasible.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of prior processing.

How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data, including secure storage, access controls, and regular staff training on data protection obligations.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal, technical, or business developments. The most current version will be available via our website at all times. Material changes to the policy will be communicated where appropriate.

Contact and Further Information

If you have queries about this Privacy Policy, your personal data rights, or how we process your information, you may contact us using the details provided on our website or through our usual customer service channels. We are committed to working with you to resolve any concerns regarding your data privacy.