Florist Motspur Park Privacy Policy

About This Privacy Policy

This Privacy Policy sets out how Florist Motspur Park collects, uses, processes, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. The policy applies to all customers who place orders with Florist Motspur Park from Motspur Park and the surrounding districts.

The Data We Collect

When you interact with Florist Motspur Park, we may collect the following types of personal data:

  • Identity and Contact Data: Name, delivery address, billing address, and contact preferences.
  • Order Information: Details of products ordered, delivery instructions, and messages for recipients.
  • Payment and Transaction Data: Payment confirmation (note: we do not store full credit or debit card information but may receive confirmation of payment from our payment processor).
  • Technical and Usage Data: Information gathered through cookies and similar technologies, such as IP address, browser type, device information, visit duration, and navigation patterns on our website.
  • Correspondence: Records of any communications, feedback, or complaints you submit.

Lawful Basis for Processing Data

Florist Motspur Park processes your personal data only where there is a lawful basis under GDPR, including:

  • Contractual Necessity: To process and fulfill your flower orders and to manage payments and deliveries.
  • Legal Obligation: To comply with legal and regulatory requirements, such as tax and accounting obligations.
  • Legitimate Interests: To improve our services, manage business operations, protect the security of our website, and prevent fraud. We ensure that such processing does not override your fundamental rights and interests.
  • Consent: Where required, such as for sending optional marketing communications. You may withdraw consent at any time.

How We Use Your Data

We may use your personal data for the following purposes:

  • Processing, fulfilling, and delivering your order.
  • Handling payment transactions and issuing invoices or receipts.
  • Communicating order updates or responding to your queries.
  • Improving our products, services, and customer experience.
  • Complying with applicable law and resolving disputes.

Data Retention

Florist Motspur Park only retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including meeting legal, accounting, or reporting requirements.

  • Order and Transaction Data: Retained for up to 7 years in accordance with tax and financial regulations.
  • Marketing Data: Retained until you unsubscribe or withdraw your consent.
  • Technical Data: Stored for up to 24 months for analytics and website improvement purposes.
  • Correspondence: Retained for as long as required to resolve feedback or queries, and up to 3 years for record-keeping.

At the end of the retention period, your data will be securely deleted or anonymised.

Data Sharing and Processors

Florist Motspur Park only shares your personal data with trusted third parties as necessary to provide our services or to comply with the law. These may include:

  • Payment Processors: Securely handle payment transactions on our behalf.
  • IT and Web Service Providers: Support our website, email communications, and data storage.
  • Delivery Partners: Ensure your flower orders are delivered to the correct address.
  • Professional Advisors: Such as accountants or legal advisors, solely for business administration and compliance.

All third-party processors are contractually required to process your data securely and in accordance with GDPR. We do not sell or lease your personal data to any third parties for their marketing purposes. Should any data be transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place.

Your Rights Under GDPR

As a data subject, you have the following rights with respect to your personal data held by Florist Motspur Park:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Have any inaccurate or incomplete data corrected.
  • Erasure: Request deletion of your data where there is no longer a lawful basis for its retention (the "right to be forgotten").
  • Restriction: Request restriction on the processing of your data in certain circumstances.
  • Portability: Receive your data in a structured, commonly used format and have it transmitted to another controller, where technically feasible.
  • Objection: Object to processing based on legitimate interests, or opt-out of direct marketing communications at any time.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of your rights, please contact us using the contact form provided on our website or by writing to our business address. We may need to verify your identity before responding to requests, and we aim to reply within one month.

Data Security

We take appropriate technical and organisational measures to secure your personal data from loss, misuse, unauthorised access, alteration, or disclosure. These include encryption, secure data storage, access controls, and staff training.

Policy Updates

This Privacy Policy may be updated occasionally to reflect changes in legal requirements or our business operations. The latest version will always be published on our website, and the date of the most recent revision will be indicated at the end of the policy. We encourage you to review this page regularly to stay informed about how we protect your privacy.

Contact and Complaints

If you have any questions about this Privacy Policy or how your data is handled by Florist Motspur Park, please contact us through the means provided on our website. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office or your local supervisory authority.

Last updated: June 2024