Downe Florist GDPR Privacy Policy

Name: TROPIC GETAWAY
Brand: Downe Florist
Price: 64.00 GBP
Availability: InStock

Introduction

This Privacy Policy outlines how Downe Florist collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Downe Florist in Downe and the surrounding districts. We are committed to safeguarding your information and ensuring transparency about how your data is handled.

What Data We Collect

When you place an order with Downe Florist, we collect and store only the necessary information required to process your purchase and provide our floral services. The categories of personal data we collect include:

Contact Details: Name, postal address, and telephone number.
Order Information: Details of your order, recipient’s name, address, messages to be included on the card, and delivery instructions.
Payment Information: Transactional details — though full payment card information is handled securely by our trusted payment processor and is not stored by Downe Florist.
Communication Data: Records of correspondence relating to your order, feedback, or customer service queries.

Lawful Basis for Processing

Downe Florist only collects and uses your personal data where we have a lawful basis under the GDPR. These are:

Contractual Necessity: Data is processed to fulfill our obligations when you place an order and to deliver floral products as requested.
Legal Compliance: We may retain information as required by applicable law (such as record-keeping for tax purposes).
Legitimate Interests: We may process data for matters such as customer service improvements, fraud prevention, or defence against legal claims, as long as such interests do not override your rights and freedoms.
Consent: We may seek your explicit consent to process data for specific purposes, such as receiving marketing communications (where required).

How We Use Your Data

Your personal data is used for the following purposes:

To process, fulfil, and deliver your floral orders.
To communicate with you about your order or respond to your enquiries.
To handle payments through an accredited payment processor.
To maintain financial and business records as required by law.
To improve our services and customer experiences.
To send marketing communications with your explicit consent, where applicable.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy. Specifically, Downe Florist adheres to the following retention periods:

Order and delivery details: Retained for up to 7 years to comply with legal and tax requirements.
Customer communications: Retained for up to 3 years after last contact to address follow-up enquiries or complaints.
Marketing consents: Retained until you withdraw consent or request removal.

Data no longer required will be securely deleted or anonymised.

Third-Party Processors

Downe Florist uses trusted third-party service providers (“processors”) to assist in delivering our products and services. These include:

Payment Processors: To handle payments securely. We do not receive or store your full card details.
IT Service Providers: To host, manage, and maintain our order systems and communications.
Delivery Partners: To assist with the fulfilment and handover of your order when necessary.

We ensure all processors comply with GDPR and only process your data under our instructions and for the specified purposes. Your data will not be sold, transferred, or shared with any third parties for their own marketing purposes.

Your Rights as a Data Subject

Under GDPR, you have the following rights in relation to your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request erasure of your personal data where there is no longer a legitimate reason for retention.
Right to Restrict Processing: Ask for limits on our processing of your data.
Right to Data Portability: Obtain and reuse your personal data for your own purposes across different services.
Right to Object: Object to processing of your data for direct marketing or on grounds relating to your particular situation.
Right to Withdraw Consent: Where we process your data with your consent, you can withdraw this at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority if you believe your rights have been infringed.

To exercise your rights, please contact us with clear details of your request. We will respond promptly and within the timeframes stated in GDPR.

Data Security

We take the security of your personal data seriously. Appropriate technical and organisational measures are in place to protect your data from unauthorised access, loss, misuse, disclosure, alteration, or destruction. Access to your data is restricted to staff and processors who require it to fulfill our services.

Policy Updates

This policy is regularly reviewed and may be updated to reflect changes to our practices or for legal and regulatory reasons. Customers will be notified of any material changes where appropriate. Please review this policy periodically to stay informed about how we protect your data.

Contact and Queries

If you have any questions about this Privacy Policy or how we process your data, please contact us through our website or in writing. We are committed to responding in a timely and transparent manner.

Thank you for trusting Downe Florist with your order and personal information.