St Mary Cray Florist Privacy Policy

Introduction to Our Privacy Policy

St Mary Cray Florist takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information in line with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. This Policy applies to all customers placing orders with St Mary Cray Florist, whether in St Mary Cray or in the surrounding districts. By using our services, you acknowledge the practices described below.

What Personal Data We Collect

When you place an order with St Mary Cray Florist or interact with us, we may collect the following categories of personal data:

• Customer Identification Data: Name, delivery address, billing address.
• Contact Details: Telephone number, postal address, and, where relevant, email address.
• Order and Transaction Data: Order details, purchase history, payment confirmation (not credit card numbers), and delivery instructions.
• Recipient Information: Name, delivery address, and any gift card messages provided for recipients of floral arrangements.
• Communication Records: Correspondence from you relating to orders, compliments, complaints, or other queries.

Lawful Basis for Processing Your Data

GDPR requires that we identify valid legal bases for processing your personal data. We process your information on the following grounds:

• Contractual Necessity: Processing is required to fulfil your order and deliver flowers to you or to your chosen recipient.
• Legal Obligation: To comply with UK legal requirements, including tax and accounting regulations.
• Legitimate Interests: For our legitimate business interests, such as improving our services, handling customer enquiries or preventing fraud, provided these interests do not override your privacy rights.
• Consent: If you agree to receive future marketing promotions or updates, we rely on your explicit consent. You may withdraw this consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing and delivering your orders, including communicating with you about the status of your delivery
• Managing payments and confirming transactions
• Providing customer support and responding to enquiries or complaints
• Fulfilling our accounting, taxation, and record-keeping duties
• Improving our products and customer experience
• Complying with applicable legal requirements
• Sending you service-related notifications, and, where you have consented, marketing communications

Retention of Your Data

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, including for fulfilling your orders and as required for our legitimate business purposes or to meet legal, accounting, or reporting requirements. In general:

• Order and transaction data will typically be retained for up to seven years in accordance with financial record-keeping obligations.
• Contact information provided solely for enquiries is deleted once your request has been addressed unless you become a customer.
• Marketing data processed based on your consent will be held until you opt-out or withdraw consent.

Data Processors and Data Sharing

In the course of providing our services, it is sometimes necessary to share your data with trusted third parties. These third parties act as data processors on our behalf and are required to process your data only in accordance with our instructions and in compliance with GDPR. Such third parties may include:

• Payment processing companies to handle your transactions securely
• Delivery and courier services to ensure your flowers are delivered to the right address
• IT and system administration service providers assisting with order processing and system support
• Professional advisers, such as accountants or legal consultants, where needed for compliance with our legal obligations

We do not share or sell your personal information for marketing purposes with any third parties outside of St Mary Cray Florist. Under no circumstances will your data be transferred outside the UK or European Economic Area unless the recipient provides appropriate data protection standards in line with GDPR.

Your Rights Under GDPR

Under UK and EU data protection law, you have several important rights, including:

• The right to access: You can request a copy of the personal information we hold about you and information about how we process it.
• The right to rectification: You can ask us to correct any inaccurate or incomplete personal data we hold about you.
• The right to erasure: You can request that we delete your personal data where there is no good reason for us to continue processing it, subject to our legal obligations to retain certain information.
• The right to restrict processing: You may limit how we use your data in certain circumstances.
• The right to object: You can object to our processing of your personal data on the basis of legitimate interests or direct marketing at any time.
• The right to data portability: You may ask us to provide your data in a structured, commonly used and machine-readable format for transfer to another provider, where technically feasible.

If you wish to exercise any of these rights, or if you have any questions or concerns about your privacy or this Policy, please contact us using the details available on our website or shop premises.

Protecting Your Personal Data

We implement appropriate technical and organisational measures to safeguard your personal information. This includes access controls, secure storage, staff training, and regular policy reviews. While we strive to protect your data, please note that no internet transmission is entirely secure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in line with changes to our business or legal obligations. We encourage you to review this Policy periodically so you are aware of how we protect your information.

Contact and Further Information

If you require additional information regarding our Privacy Policy, your personal data, or how your rights can be exercised, please visit our premises or refer to communications issued at the time of your order. We are committed to upholding your privacy every step of the way while providing the best possible experience at St Mary Cray Florist.