Merton Florist Privacy Policy

Name: IN THE STARS
Brand: Merton Florist
Price: 60.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Merton Florist collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers who place flower orders with Merton Florist from Merton and surrounding districts. By placing an order with us, you acknowledge the practices described in this policy.

What Data We Collect

We are committed to collecting only the information necessary to fulfill our services and to provide you with the best customer experience. The personal data we collect includes:

Contact information: Such as your name, recipient's name, address, and phone number (for delivery and customer identification).
Order details: Including the type of flowers, delivery preferences, card messages, and occasion details.
Payment information: Details required to process your payment (e.g., credit/debit card details). Please note, payment processing is handled by third-party providers and we do not store full card details.
Communication data: Information you provide in correspondence with us, such as emails or feedback forms.
Technical data: Limited technical details such as IP address, browser type, and device information, gathered through our website for security and performance monitoring.

Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

Contractual necessity: We require your data to process and deliver your flower order, and to communicate about your purchase.
Legal obligation: We retain certain records as required by tax, accounting, and other relevant laws.
Legitimate interests: To improve our service, maintain security, and respond to your enquiries, provided these interests do not override your data protection rights.
Consent: Where required, for example, for marketing communications. You may withdraw your consent at any time.

How We Use Your Data

Your data is used for the following purposes:

Processing and delivering your flower order.
Contacting you regarding your order, confirmation, delivery, or payment issues.
Managing customer relationships and improving service quality.
Complying with legal and tax obligations.
Preventing fraud and ensuring the security of our website and services.
Sending you service-related communications. With your consent, we may provide updates or promotional offers.

Retention of Your Data

We retain your personal data only as long as necessary for the purposes it was collected for, and to comply with legal and accounting requirements. Typically, customer and order data is retained for up to seven years to meet legal obligations. Payment details used for order processing are not stored beyond completion of the transaction. Once data is no longer required, it is securely deleted or anonymised.

Third Party Processors

To provide our services, we use trusted third-party processors who act on our instructions and uphold GDPR standards. These include:

Payment service providers: For secure payment processing.
Delivery partners: For delivering your flower orders as per your instructions.
Technical service providers: For hosting our website and maintaining its security and performance.

All processors are contractually bound to keep your data secure and to process it only for the agreed purposes. We do not sell or share your data with unconnected third parties.

Your Rights

Under GDPR, you have the following rights regarding your personal data held by Merton Florist:

Right to access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your data (“the right to be forgotten”) under certain circumstances, such as when data is no longer required.
Right to restrict processing: Ask us to limit usage of your data, if you believe it is incorrect or being used unlawfully.
Right to data portability: Request transfer of your data to another service provider where technically feasible.
Right to object: Object to certain uses of your data, including direct marketing.
Right to withdraw consent: Withdraw consent at any time for processing based on consent.
Right to lodge a complaint: You may raise concerns with the UK Information Commissioner’s Office (ICO) if you believe your data rights have been infringed.

Data Security

We implement robust technical and organisational measures to safeguard your personal data against accidental loss, misuse, or unauthorised access. Access to your personal data is restricted to those employees and service providers who require it for the delivery of our services. We regularly review our security procedures to ensure compliance with GDPR.

International Data Transfers

Merton Florist generally stores and processes your data within the UK or the European Economic Area (EEA). Where data may be transferred outside these areas (for example, if a technical service provider is located elsewhere), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your privacy rights.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data processing practices, or legal requirements. The most recent version will always be available on our website. Please review it periodically to stay informed about how we protect your data.

Contact and Further Information

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch with us. Further information about your data protection rights can be obtained from the UK Information Commissioner’s Office.