Florist Aldgate Privacy Policy

Scope of This Policy

This Privacy Policy describes how Florist Aldgate ("we", "us" or "our") collects, uses, stores, and protects your personal data when you place orders with us from Aldgate and surrounding districts. We are committed to safeguarding your personal information and ensuring your rights as provided by the General Data Protection Regulation (GDPR) are protected. By using our services, you accept the practices outlined in this Privacy Policy.

What Data We Collect

When placing an order with Florist Aldgate, we may collect the following personal data to process your order efficiently:

• Identity Data: Full name, delivery recipient name, and in some cases, your relationship to the recipient.
• Contact Data: Delivery address, billing address, and in some cases, your contact number.
• Order Data: Details of your requested floral product or service, including delivery instructions and personalized messages.
• Payment Data: Information necessary to process payment, such as payment method or partial card details (note: full payment information is processed securely by third-party payment services).
• Technical Data: IP address, browser type, and other technical data automatically collected when you use our website for order placement.

We do not knowingly collect or process sensitive personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, health, or biometric data).

Lawful Basis for Processing Your Data

We process your data based on the following lawful grounds under the GDPR:

• Contractual Necessity: Most of the data processing we perform is required to fulfill your order and contract with us. Without this data, we cannot deliver your chosen products or contact you about your order.
• Legal Obligations: Some processing is necessary to comply with legal obligations, such as bookkeeping or responding to regulatory requests.
• Legitimate Interests: We may use your data for legitimate business interests, such as improving our services, addressing complaints, or fraud prevention, provided these do not override your data protection rights.
• Consent: In certain cases (e.g., marketing communications), we will obtain your explicit consent where required by law. You are free to withdraw this consent at any time.

How We Use and Share Your Data

Your data will be used solely for the purpose of fulfilling your orders, communicating with you about those orders, and improving our services. We may share your data with:

• Service Providers and Processors: Trusted third parties who provide essential services, such as payment processors (to facilitate payments), delivery partners (to deliver your order), and IT service providers (who help us securely manage our systems). All such partners are contractually bound to protect your personal data and only use it in accordance with our instructions.
• Professional Advisors: Where necessary, we may share information with legal, accounting, or insurance professionals for compliance or advisory purposes.
• Authorities: We may disclose data when required by applicable law or regulation, or in response to lawful requests by public authorities.

We do not sell, lease, or share your personal data with third parties for their own direct marketing purposes.

Data Retention

Florist Aldgate will retain your data only for as long as is necessary to fulfill the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements. Typically, we keep order and contact data for up to seven years to comply with legal obligations (such as tax law and recordkeeping). Data that is no longer needed will be deleted or anonymised in a secure manner.

Your Rights Under GDPR

As a customer residing in Aldgate and surrounding districts, you have the following data rights:

• Right of Access: You can request access to the personal data we hold about you and receive a copy.
• Right to Rectification: You have the right to have incorrect or incomplete data corrected.
• Right to Erasure: You may request deletion of your data when it is no longer required for processing, unless we are legally obliged to retain it.
• Right to Restrict Processing: You can ask us to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request to receive your data in a commonly used, machine-readable format for transmission to another controller.
• Right to Object: You can object to certain types of processing, such as direct marketing or processing based on legitimate interest.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time.

To exercise these rights, you may contact us using the standard communication channels provided on our website. Please be aware that we may request verification of your identity before fulfilling your request. We aim to respond to all legitimate requests within one month and will inform you if we need more time or if we are legally unable to comply.

Data Security

We implement appropriate technical and organizational measures to ensure your data remains secure, confidential, and protected from accidental loss, misuse, unauthorized access, or disclosure. Where we use external processors, we ensure they are GDPR-compliant and uphold comparable data protection standards.

International Data Transfers

Your data may be processed by our external processors outside the European Economic Area (EEA), in which case, we ensure adequate safeguards are in place, such as legally binding data protection agreements or approved certification mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We encourage you to review this policy periodically. The updated version will be posted on our website and will be effective from the moment of posting.

Contact and Further Information

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us using the communication methods provided on our website. We are committed to resolving your queries and upholding your rights.

This Privacy Policy applies to all customers placing Florist Aldgate orders for delivery within Aldgate and surrounding districts.