Privacy Policy – How Bickley Florist Safeguards Your Information

Introduction

This Privacy Policy explains how Bickley Florist (‘we’, ‘us’, or ‘our’) collects, uses, and protects the personal data of customers who place orders with us from Bickley and surrounding districts. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 to respect your privacy rights and ensure transparency about how your information is processed.

What Data We Collect

When you place an order, make an enquiry, or interact with Bickley Florist, we may collect the following categories of personal information:

• Contact Information: such as your full name, billing and delivery addresses, and telephone number.
• Order Details: including occasion type, product selections, recipient details, delivery instructions, and any personalised messages.
• Payment Information: such as partial payment card details (e.g., last four digits, expiry date) where necessary. Payment processing is managed through secure third-party processors; we do not store full card details.
• Communication Data: your correspondence with us, including any feedback, complaints, or special requests.
• Technical Data: where applicable, your IP address, device information, and website usage statistics when you use our online services.

Lawful Basis for Collecting Your Data

We collect and process your personal data only where we have a valid lawful basis under the UK GDPR. The primary bases are:

• Contractual Necessity: We require your data to process and deliver your orders and provide the services you request.
• Legitimate Interests: To enhance our products and services, assist with customer queries, and improve website functionality, except where such interests are overridden by your fundamental rights and freedoms.
• Legal Obligations: We may retain certain data to comply with legal and regulatory requirements, such as accounting and taxation laws.
• Consent: For activities such as sending marketing communications or promotions, we seek your explicit consent, which you can withdraw at any time.

How We Use Your Information

Your information is used for the following purposes:

• Processing and fulfilling floral orders and related transactions.
• Communicating with you about your order, delivery details, or customer enquiries.
• Improving our services, products, and website experience.
• Undertaking fraud prevention and security monitoring.
• Adhering to legal and regulatory obligations.
• Providing customer support and responding to feedback or complaints.

Data Retention

Bickley Florist only retains your data for as long as it is necessary to fulfill the purposes outlined in this Policy, in accordance with applicable laws and regulations. Generally:

• Order and transaction data is retained for up to 7 years to comply with tax and accounting requirements.
• Contact details used for customer service enquiries or complaints are retained for no longer than 2 years after resolution.
• If you have subscribed to receive marketing information, your contact details are held until you withdraw your consent.
• Technical data is retained only as long as necessary to ensure website security and performance.

Data Processors and Sharing

We use trusted third-party service providers (‘data processors’) to perform certain functions on our behalf. This may include:

• Payment service providers processing transactions securely.
• Delivery and courier partners handling the transportation of your orders.
• IT and hosting providers supporting our website and systems.
• Professional advisors (accountants, auditors, legal counsel) as required by law.

All processors are contractually obligated to protect your data and process it only in accordance with our instructions and UK GDPR requirements. We do not sell or rent your data to third parties. Data may be shared with relevant authorities if required by law.

User Rights Under UK GDPR

You have the following rights over your personal information:

• The right to access: You may request a copy of the personal data we hold about you.
• The right to rectification: You may request correction of inaccurate or incomplete data.
• The right to erasure: You can ask for your data to be deleted, subject to legal retention requirements.
• The right to restrict processing: You can request limitations on how we process your information in certain circumstances.
• The right to data portability: Where feasible, you can request to receive your data in a structured, commonly used format.
• The right to object: You may object to our processing of your data on grounds relating to your particular situation, including direct marketing.
• The right to withdraw consent: Where consent is the basis for processing, you can withdraw it at any time.

To exercise these rights or make a complaint, please contact us by post or in person at our registered business premises. You may also contact the UK Information Commissioner’s Office if you believe your rights have not been appropriately handled.

Data Security

We use a combination of physical, technical, and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure, or alteration. Access to your data is limited to employees and processors who require it to fulfill your order and our legal obligations.

Changes to This Policy

This Privacy Policy is reviewed periodically and may be updated to reflect changes in our practices or legal requirements. We will alert customers to significant changes where appropriate.

Scope of This Policy

This policy applies to all customers placing Bickley Florist orders from Bickley and surrounding districts, whether orders are made in person, by phone, or via our website. Please ensure you review this Policy regularly to stay informed about how we protect your data.