Dagenham Florist Privacy Policy Overview

Introduction

This Privacy Policy explains how Dagenham Florist ('we', 'our', 'us') collects, processes, and protects your personal information. The policy applies to all individual customers placing orders with Dagenham Florist from Dagenham and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and are dedicated to protecting your privacy and personal data.

What Data We Collect

When you order flowers or related products and services from us, we may collect and process the following types of personal data:

• Contact Information: such as your name, address, phone number, and, where applicable, the recipient’s name and delivery address.
• Order Details: including product selections, special instructions, messages for gift cards, and delivery preferences.
• Payment Information: such as payment method, partial card numbers, and transaction confirmation provided by our payment processors. (Please note: we do not store your full credit/debit card details.)
• Correspondence: any communication you send to us regarding your order or feedback.
• Technical Information: for website users, non-identifying data such as IP addresses, browser type, and usage statistics.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Dagenham Florist processes data on the following grounds:

• Contractual Necessity: Most of the personal data we collect is necessary for fulfilling your floral order and services, including processing payments and delivering products.
• Legal Obligation: We may retain certain data to comply with accounting and tax laws.
• Legitimate Interests: Data may be used to manage and improve our service, handle queries, prevent fraud, and pursue our legitimate business interests, except where such interests are overridden by your rights and freedoms.
• Consent: Where required, such as for marketing communications, we rely on your explicit consent. You can withdraw consent at any time.

How We Use Your Data

We use personal data to:

• Process and deliver your floral orders
• Communicate with you regarding your order status or any queries
• Handle complaints, refunds, or inquiries
• Comply with legal and regulatory obligations
• Keep internal records and analyze service quality
• If consent is given, send you information about our products or special offers

Third-Party Processors

To provide our services, we work with several trusted third parties ('processors') who process data on our behalf, including:

• Payment processing providers
• IT support and website hosting services
• Delivery partners, where necessary
• Accountants and legal advisors

We ensure all processors are subject to strict data protection and confidentiality obligations consistent with this policy. We do not sell or share your personal data with third parties for their own marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order and transaction records are typically kept for up to seven years to comply with tax and legal obligations.
• Contact and order history may be retained for customer care purposes for up to six years following your last order, unless you request earlier deletion where legally permissible.
• Where data is processed based on your consent (e.g., marketing), we retain it until you withdraw consent.

Your data is securely deleted or anonymized when it is no longer needed.

Your Rights Under GDPR

As a customer, you have the following rights under GDPR:

• The right to access: You can request a copy of your personal data we hold about you.
• The right to rectification: You may ask us to update or correct inaccurate data.
• The right to erasure ('right to be forgotten'): You can request deletion of your personal data, subject to legal requirements.
• The right to restrict processing: In certain circumstances, you can limit how we use your data.
• The right to data portability: You may request that your data is provided to you in a commonly used, machine-readable format.
• The right to object: You may object to processing in certain cases, such as direct marketing.
• Rights regarding automated decision-making: We do not carry out automated decisions or profiling that produce legal effects for customers.
• Withdraw consent: Where consent is the legal basis, you can withdraw it at any time.

To exercise your rights, please contact us using the methods provided on our website or in our store. We respond to requests within one month, subject to verification of your identity.

Security of Your Data

Dagenham Florist takes data protection seriously. We implement appropriate physical, technical, and organizational measures to safeguard your personal data against loss, theft, misuse, and unauthorised access. Our staff are trained on data protection and confidentiality.

International Transfers

Your data is normally stored within the European Economic Area (EEA). Where processors transfer data outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in practices, legal obligations, or for other operational reasons. The modified version will always be available on our website, and we encourage you to review it periodically.

Contact and Complaints

If you have questions about this Privacy Policy, how we handle your data, or wish to make a data access request, please use the contact details provided on our website or visit us in store. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been violated.

Policy Scope

This policy covers all customers who place orders with Dagenham Florist from Dagenham and the surrounding districts. By placing an order, you acknowledge that you have read and understood this Privacy Policy.