GDPR Privacy Policy for West Ham Florist Customers

Introduction

At West Ham Florist, safeguarding your privacy is our utmost priority. This GDPR-compliant privacy policy explains how we collect, process, store, and protect the personal data of all customers placing orders with West Ham Florist in West Ham and the surrounding districts. By placing an order, you agree to the processes outlined in this policy. We encourage you to read this document thoroughly so you understand your rights and our obligations regarding your personal data.

What Data We Collect

West Ham Florist collects necessary personal data to fulfill your flower orders and provide top-quality customer service. The types of data we may collect include:

• Identity Data: Your full name, billing and delivery address.
• Contact Data: Mobile number, and where applicable, email address.
• Order Data: Product details, card messages, recipient information, order history, and preferences.
• Payment Data: Payment method details (note: we do not store full card details, only confirmation that payment has been made securely).
• Correspondence Data: Any information provided through customer service interactions, including queries, feedback, and complaints.

We do not intentionally collect data that could be considered sensitive (such as information about your health, gender, or religious beliefs) unless expressly provided by you as part of a specific request (for example, in card messages or special flower suitability requirements).

Lawful Basis for Collecting Data

Under the General Data Protection Regulation (GDPR), we collect and process your data only when we have a lawful basis to do so. The lawful bases that may apply include:

• Contractual Obligation: To process your order, deliver your floral gifts, and fulfill our contractual obligations to you as a customer.
• Legal Obligation: To comply with UK laws and tax regulations that require record-keeping of customer transactions.
• Legitimate Interest: To ensure the effective operation of our website and delivery services, respond to your enquiries, prevent fraud, and improve our services.
• Consent: For marketing communications, we will only send you marketing emails or texts if you have given your explicit consent. You can withdraw your consent at any time.

Data Retention: How Long We Keep Your Data

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements.

• Customer order details are generally retained for up to six years after your last transaction, to meet UK accounting and tax obligations.
• Contact and communication records are stored for up to two years from your last interaction with us, unless a longer retention period is required by law or justified for fraud prevention or dispute resolution.
• If you have opted into our marketing communications, your information is retained until you opt out or withdraw consent.

Once data is no longer needed for its intended purpose, it will be securely deleted or anonymised.

Data Processors and Sharing Your Data

To provide our services, we may share your data with selected third-party processors who act on our behalf, including:

• Delivery partners and couriers to ensure your floral gifts reach their recipients.
• Payment service providers to securely process your orders.
• IT and website management support services to maintain effective systems and security.
• Legal, regulatory, or law enforcement authorities if required by law.

All such third parties are required to comply with the strict standards set out by GDPR and to process your data only in accordance with our instructions. We never sell or rent your personal data to any third party for marketing or other purposes.

Your data is stored within the UK or European Economic Area (EEA), and we do not transfer your personal data outside of these regions except where adequate protections are in place and as permitted by law.

Your Data Protection Rights

As a customer of West Ham Florist, you are entitled under GDPR to exercise several rights regarding your personal data:

• Right to Access: You may request access to the personal data we hold about you and receive a copy of it.
• Right to Rectification: You may request correction of any inaccurate or incomplete information we hold about you.
• Right to Erasure: You may request deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Right to Restrict Processing: You may ask us to restrict the processing of your data under certain circumstances.
• Right to Data Portability: You may request to receive your data in a commonly used format, where technically feasible.
• Right to Object: You may object to our processing of your data where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where you have provided consent for marketing, you can withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the details provided on our website. We will respond to your request as quickly as possible and always within the legal timeframes stipulated by GDPR.

Policy Updates and Applicability

This privacy policy applies to all customers placing orders with West Ham Florist from West Ham or the surrounding districts. From time to time, we may update this privacy policy to reflect changes in our data practices or legal requirements. Please review this page regularly to ensure you remain informed about how we process your personal data.

Your continued use of our services following any changes to this policy will mean that you accept those updates.

Contact and Further Information

If you have any questions, concerns, or wish to exercise your data protection rights, please contact us via the contact form or address details available on our website. If you are not satisfied with our response, you also have the right to lodge a complaint regarding your data with the Information Commissioner's Office (ICO).