Charlton Florist Privacy Policy – GDPR Compliance

Introduction and Scope

This Privacy Policy explains how Charlton Florist collects, uses, processes, and safeguards your personal information. This policy is drafted in compliance with the General Data Protection Regulation (GDPR) and applies to all customers placing orders with Charlton Florist, whether residing in Charlton or the surrounding districts. By placing an order or contacting us, you acknowledge and agree to the practices described herein.

What Data We Collect

In the course of operating our business and providing floral products and services, Charlton Florist may process the following categories of personal data:

• Identity Data: customer name, recipient name
• Contact Data: customer address, recipient address, phone number
• Order Data: order details, delivery instructions, purchase history
• Payment Data: payment card details, billing data (handled securely via payment processors)
• Correspondence Data: communications sent to or received from you (e.g., order queries, delivery feedback)
• Technical Data: IP address, browser type, and information collected through cookies when using our website (if applicable)

Lawful Basis for Processing Personal Data

We process your personal data under the following lawful bases as stipulated by the GDPR:

• Contractual Necessity: Most data we collect is processed on the basis that it is necessary to fulfill our contract with you (i.e., to process, fulfill, and deliver your order).
• Legitimate Interests: We may process data to pursue our legitimate interests, such as improving our services, providing customer support, and managing our operations. We ensure these interests are not overridden by your data protection rights.
• Legal Obligations: Certain information may be processed to comply with legal and regulatory requirements (e.g., accounting records).
• Consent: Where your consent is required, such as for marketing communications, we will obtain this separately and you may withdraw it at any time.

How We Use Your Data

Charlton Florist uses your personal data to:

• Process, confirm, and fulfill your orders
• Communicate with you regarding order updates or delivery issues
• Personalise our service to enhance your experience
• Address customer service enquiries and complaints
• Manage administrative and business operations, including record-keeping
• Comply with legal and financial obligations

We do not sell your personal data to any third parties.

Data Retention

Personal data is only retained as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, customer order records are retained for up to 7 years, in line with standard accounting practices. After this retention period, your information will be securely deleted or anonymised. Data obtained for marketing purposes will be held until you withdraw your consent or opt out.

Data Processors and Third Parties

Charlton Florist may share your personal information with trusted service providers (data processors) who assist us in providing our services. These may include:

• Payment processing services for secure handling of payments
• Delivery agents or couriers for the purposes of delivering your order
• IT support and website hosting providers to maintain business operations
• Professional advisers such as accountants and legal consultants

All processors are required to act in accordance with our instructions, handle your data securely, and only use it for the specified purpose. They are contractually obliged not to share your data beyond the agreed arrangements.

Please note that if you are redirected to external sites to make a payment, those sites operate under their own privacy policies, and we recommend reviewing their terms separately.

Your Data Protection Rights

Under GDPR, you have several important rights in relation to your personal data that we hold. These rights include:

• The right to access: You may request a copy of the personal data we hold about you.
• The right to rectification: You may request correction of inaccurate or incomplete data.
• The right to erasure: You may ask for your information to be deleted where there is no good reason for us to continue processing it.
• The right to restrict processing: You can request the restriction of processing of your personal data.
• The right to object: You can object to certain types of processing, including direct marketing.
• The right to data portability: In some circumstances, you can request we transfer your data to you or a third party of your choice.

To exercise any of these rights, or if you have any questions about how we process your data, please contact us using the details at the end of this policy or via our website's "Contact Us" page. Please note that we may require you to verify your identity before acting on such requests.

Data Security and Storage

We take the security of your personal data seriously. Appropriate technical and organisational measures are in place to prevent unauthorised access, misuse, accidental loss, destruction, or damage. Only authorised staff and service providers have access to your data when necessary for their duties.

Children's Privacy

Charlton Florist does not knowingly collect data from children under the age of 16. If we learn that a child has provided us with personal data without parental consent, that information will be deleted promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised date.

Contact and Further Information

If you have any questions, concerns, or wish to make a data rights request, please contact us through our website’s provided channels. We take your privacy seriously and are committed to ensuring your personal information is handled in compliance with applicable data protection laws.