Florist Tulse Hill Data Privacy and Rights Statement

Privacy Policy for Florist Tulse Hill

Introduction

At Florist Tulse Hill, we are committed to protecting the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, store, and share your information in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Florist Tulse Hill in Tulse Hill and the surrounding districts.

Data We Collect

When you place an order or interact with our services, we may collect and process the following categories of personal data:

Identity Information: Full name, and where required, information relating to recipient names for delivery.
Contact Information: Address, postcode, and delivery details; telephone number if provided; and contact name.
Order Information: Order history, purchase details, delivery instructions, and messages included with orders.
Payment Information: Card transaction confirmations supplied by third-party payment processors. (We do not store your full card details.)
Communication Records: Any correspondence, feedback, or queries submitted through our website or via telephone, only as necessary to provide customer service.
Device and Usage Data: Limited technical data such as IP addresses, browser type, and transaction logs for website functionality and security.

Lawful Bases for Processing

We only process your personal information where we have a lawful basis to do so. The relevant lawful bases under GDPR are:

Contractual Necessity: To fulfil our contract with you, such as processing your order, delivering flowers, and managing payments.
Legitimate Interests: To carry out business operations including record-keeping, responding to enquiries, and improving our services, provided these interests do not override your rights.
Legal Obligation: To comply with applicable laws, such as tax and accounting requirements.
Consent: Where we request and you provide explicit permission, such as for marketing communications (which we will always make optional and allow you to withdraw at any time).

How We Use Your Data

Florist Tulse Hill uses your personal data for the following purposes:

To process and fulfill your flower orders, including managing delivery logistics with our couriers or delivery partners.
To maintain accurate business records and handle payments securely through third-party payment processors.
To communicate with you about your order status, respond to customer service enquiries, and provide order-related notifications.
To administer and improve our website, monitor transactions for fraud prevention, and analyse service usage trends.
Where you have provided consent, to send relevant offers, promotions, or updates about our services.

Data Retention Policy

We retain personal information only for as long as necessary to fulfil the purposes it was collected for, including the satisfaction of any legal, accounting, or reporting requirements. In general, your basic order and contact information is retained for up to seven years to comply with legal obligations for financial and tax records. Where data is held purely for marketing (with your consent), it is retained until you withdraw that consent. Records related to customer queries and complaints may be kept for up to two years to resolve any issues. Once data is no longer required, it is securely deleted or anonymised.

Data Processors and Sharing

We may share your personal data with trusted third-party service providers (“processors”) only as necessary to carry out our services. These include:

Payment processors for secure handling of payments and transaction validations.
Delivery partners or couriers to fulfill your orders and complete deliveries.
IT service providers and website hosting companies for maintaining our electronic systems and website security.
Professional advisers (including legal, audit, or accounting services) if required by law.

All processors are subject to contractual obligations requiring them to safeguard your data in accordance with GDPR requirements. We do not transfer your personal data outside the United Kingdom or European Economic Area except where such protections are in place, as required by law.

Your Data Protection Rights

Under the GDPR, as a customer of Florist Tulse Hill you have the following rights in relation to your personal information:

Right of Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: If your data is inaccurate or incomplete, you may request correction or completion.
Right to Erasure: Also known as ‘the right to be forgotten’, you may request deletion of your data in certain circumstances.
Right to Object: You may object to our processing where we rely on legitimate interests or direct marketing.
Right to Restrict Processing: You can request restricted use of your data in limited situations.
Right to Data Portability: Where applicable, you have the right to receive a copy of your data in a commonly used format and transfer it to another service provider.
Right to Withdraw Consent: Where we rely on your consent (e.g., for marketing), you have the right to withdraw it at any time.

We will always respond to your requests in accordance with legal requirements and without undue delay. Identification may be required to process your request.

Protecting Your Information

We take the security of your data seriously. Appropriate technical and organisational security measures are in place—including encryption, secure access controls, regular data protection training, and audits—to protect your data from loss, misuse, unauthorised access, alteration, or destruction.

Policy Applicability and Changes

This Privacy Policy applies to all orders placed with Florist Tulse Hill by customers residing in Tulse Hill and surrounding districts, whether you order online, in-person, or by telephone. We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational needs, or new technologies. The current version will always be available to you before you place a new order.

Further Information

If you have any questions about this policy or how we handle your data, please contact us using the details provided at the point of sale or on our official website. If you believe your rights have been violated, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).