How Enfield Wash Florist Protects Your Personal Data: GDPR Policy

Enfield Wash Florist Privacy Notice

Scope of this Policy

This Privacy Policy outlines how Enfield Wash Florist collects, uses, stores, and protects the personal data of customers placing orders from Enfield Wash and surrounding districts. Compliance with the UK General Data Protection Regulation (GDPR) and related data protection legislation is at the core of our commitment to privacy. By placing an order or otherwise interacting with Enfield Wash Florist, you acknowledge and consent to our treatment of your personal data as described in this policy.

What Data We Collect

We collect and process a range of personal data necessary to fulfill orders, provide customer support, and manage our services. The categories of personal data we may collect include:

Personal Identification Data: Name, delivery address, and billing address
Contact Details: Telephone number and, if provided, email address
Order Information: Details of your order, delivery preferences, and order notes
Payment Details: Payment method (e.g., card type, bank details), but we do not store full payment information – these are handled securely by payment processors
Correspondence: Records of communications when you contact us with questions, feedback, or support requests

Lawful Basis for Processing

Enfield Wash Florist collects and processes your personal data based on the following lawful bases, as stipulated in Article 6 of the UK GDPR:

Contractual Necessity: Most of the data we collect is necessary to fulfil your order, provide our products and services, and perform our contractual obligations with you.
Legitimate Interests: We may process certain information (such as communications relating to customer service or feedback) to improve our services, manage our business operations, and enhance customer experience, provided that such interests do not override your rights and freedoms.
Legal Obligation: In some circumstances, we process your information to comply with legal requirements, such as accounting or tax records.
Consent: Where we request your explicit consent for purposes such as marketing communications, you will have the right to withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

Processing and fulfilling your orders, including delivery and confirmations
Managing payments and preventing fraud
Responding to your enquiries, requests, or feedback
Improving our products and customer experience
Maintaining business records for tax and legal compliance
Only where you agree, sending you updates or marketing about our products and services

Retention of Personal Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, customer and order data is retained for up to 7 years in line with accounting standards. Data retained for marketing purposes will be stored until you withdraw your consent. Once no longer required, your data is securely deleted or anonymised.

Data Processors and Third Parties

In the course of providing our services, we sometimes engage third-party service providers ("data processors") to assist with specific business operations, such as payment processing, order management, delivery logistics, and IT support. These processors are only given access to the personal data necessary for their function and are required to process your data securely, in accordance with our instructions and GDPR standards.

We do not sell or rent your personal data to third parties. Any sharing of data is strictly limited to enabling order fulfilment, ensuring payment security, or meeting legal requirements. Examples of data processors we might engage include payment gateways, delivery couriers, and professional advisors (such as accountants).

User Rights Under the GDPR

The GDPR provides you with a set of rights regarding your personal data held by Enfield Wash Florist:

Right of Access: You may request confirmation as to whether we process your personal data and receive a copy of that data.
Right to Rectification: You may update or correct inaccurate or incomplete information.
Right to Erasure: Also known as "the right to be forgotten," you may request the deletion of your data where there is no longer a lawful basis to retain it.
Right to Restrict Processing: You can ask us to restrict processing of your data under certain circumstances.
Right to Data Portability: Where applicable, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to Object: Where we process your data based on legitimate interests or for direct marketing, you have the right to object at any time.
Right to Withdraw Consent: If you have provided consent for any specific processing, you may withdraw it at any time, without affecting data processed prior to withdrawal.
Right to Lodge a Complaint: If you believe your rights have been infringed, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

If you wish to exercise any of your rights or have queries about your data, please contact us using the details provided in-store or on your paperwork.

Protecting Your Data

Enfield Wash Florist applies appropriate technical and organisational measures to secure your personal data from loss, misuse, unauthorised access, or disclosure. Our team is regularly trained on data protection responsibilities, and all third-party processors must agree to strict contractual safeguards. We continuously review our data security practices to meet evolving standards.

Changes to this Privacy Policy

We may occasionally update this Privacy Policy. When we do, we will revise the "last updated" date and inform customers of any significant changes, where required. Please review this notice regularly to stay informed about how we are protecting your data.

Contact and Further Information

For any further information about this Privacy Policy or to exercise your GDPR rights, please refer to the contact details available in-store or on your order confirmation paperwork. We are committed to addressing your concerns and ensuring your privacy is respected.