Florist Beckenham Privacy Policy

Introduction

This Privacy Policy explains how Florist Beckenham manages and protects your personal information in line with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Beckenham from Beckenham and the surrounding districts. It is important that you read this policy so that you are fully aware of how and why we collect, use, and store your information, as well as your rights regarding your personal data.

What Data We Collect

We collect a range of personal data required to process flower orders, manage customer relations, and comply with regulatory obligations. The type of personal data we may collect includes:

• Identity Data: Full name, billing address, delivery address.
• Contact Data: Telephone number and contact preferences.
• Order Data: Order details, delivery instructions, messages for recipients, and transaction history.
• Payment Data: Payment method details (note: we do not store your complete payment card information; this is handled by our payment processor).
• Technical Data: IP address, browser type, device data, and cookies (where applicable through our website for the purposes of improving user experience).

We do not intentionally collect sensitive personal data (also known as special category data) such as health or biometric data.

Lawful Basis for Processing

The GDPR requires us to have a lawful basis for processing your data. Florist Beckenham processes personal data on the following bases:

• Contractual Necessity: To process and deliver your flower orders, provide customer support, and fulfil the obligations of the purchase contract.
• Legal Obligation: To comply with legal and regulatory requirements, such as record keeping for tax purposes.
• Legitimate Interests: To improve Florist Beckenham’s services, prevent fraud, and maintain the security of our website.
• Consent: For sending marketing communications where you have opted in, and for the use of certain cookies. You may withdraw consent at any time.

Who We Share Your Data With (Processors)

Florist Beckenham engages with trusted third-party service providers (processors) who process data on our behalf, specifically:

• Payment Processors: Securely handle payments and prevent fraud.
• Delivery Companies: Perform local deliveries to recipients in Beckenham and neighbouring areas.
• IT Service Providers: Providers of order management and website hosting, who enable our digital operations and data security.

We require all processors to respect the security of your personal information and only use it for specified purposes and in accordance with our instructions. We do not allow our third-party service providers to use your personal data for their own purposes.

How Long We Retain Your Data

Florist Beckenham retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations. Typically, the following retention periods apply:

• Order Records: Retained for up to seven years to comply with tax and financial regulations.
• Marketing Data: If you have consented to receive marketing communications, your contact data is retained until you withdraw consent or unsubscribe.
• Technical Data: Retained for up to 24 months for the purposes of website security and analytics.

Once the retention period for a category of personal data ends or you request data erasure (subject to our legal obligations), it will be securely deleted or anonymised.

Your Rights Under GDPR

As a customer of Florist Beckenham, you have a number of rights under the GDPR:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right of Rectification: You may ask us to correct or update incorrect or incomplete information.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request a restriction of how your personal data is used.
• Right to Data Portability: You have the right to receive your personal data in a commonly used and machine-readable format.
• Right to Object: You can object to the processing of your data where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where you have provided consent for specific processing (e.g., marketing), you may withdraw your consent at any time.
• Right to Lodge a Complaint: If you believe your rights have been infringed, you have the right to lodge a complaint with the appropriate supervisory authority.

To exercise any of these rights, please contact us using the contact details provided on our website or in your order confirmation documents. We may require you to verify your identity before acting on certain requests to ensure your data is protected.

Data Security

We take the protection of your data seriously and employ appropriate technical and organisational measures to secure your personal data from unauthorised access, loss, or misuse. This includes secure storage systems, access controls, encryption of payment data, and regular staff training on data protection practices.

International Transfers

Your personal data is generally processed within the United Kingdom or European Economic Area. Where it is necessary for us to use processors outside of these regions, we ensure that adequate safeguards (such as standard contractual clauses) are in place to protect your rights and data.

Updates to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or for legal or regulatory reasons. Any material changes will be notified to customers through our website or during the order process. Please review this policy regularly to stay informed on how we protect your data.

Contacting Us

If you have any questions, concerns, or wish to exercise your data protection rights, please refer to our Contact Us page on our website or the details provided during your order confirmation. Florist Beckenham is committed to protecting your privacy and ensuring your data is processed lawfully and transparently.