Norbury Florist Privacy Policy

Introduction

This Privacy Policy details how Norbury Florist collects, uses, protects, and retains your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to every customer placing orders with Norbury Florist from Norbury and surrounding districts. Please read this policy carefully to understand your rights and how your data is handled.

What Personal Data We Collect

Norbury Florist may collect the following types of personal data when you interact with our services, especially when you place an order:

• Identity Data: Name, surname, and, if applicable, the recipient's name for flower deliveries.
• Contact Data: Address, delivery address, and telephone number necessary for fulfilling the order.
• Order Details: Details of your floral order, purchase history, card messages, and any specific instructions.
• Payment Information: Payment card details processed through our payment processors (note: card details are not stored by Norbury Florist, but may be collected during payment processing).
• Technical Data: Information about your device and browsing actions if you use our website (such as IP address, browser type, and interaction with the site).

Lawful Basis for Processing Your Data

Norbury Florist processes your personal data on the following lawful bases, as required by the GDPR:

• Contractual Necessity: Your information is required to fulfill the contract of sale—processing and delivering your order.
• Legal Obligations: Certain data may be processed to comply with laws applicable to our business, such as record keeping for tax purposes.
• Legitimate Interests: We may use personal data where it is necessary for the pursuit of our legitimate interests (for example, to improve services or handle enquiries), provided such interests are not overridden by your rights.
• Consent: We will request your consent before sending you marketing communications where required by law. Such consent can be withdrawn at any time.

How We Use Your Data

Your personal data is used to process your order, communicate with you about your purchase, and provide you with the best possible customer experience. Specifically, data may be used for:

• Order processing and fulfilment, including delivery to the nominated address.
• Responding to queries or handling customer service requests.
• Maintaining internal records for customer service and legal compliance.
• Sending reminders, updates, or information regarding your order.

If you have given consent, we may also use your information to inform you of offers, promotions, or floristry news from Norbury Florist. You may opt out of these communications at any time.

How Long We Retain Your Data

We will not retain your personal data longer than is necessary for the purposes for which it has been provided, unless a longer retention period is required or permitted by law. In practice:

• Order-related personal data is typically retained for up to 7 years to comply with tax and accounting regulations.
• Marketing contact details are retained until you withdraw your consent or opt out.
• Technical data from website visitors is usually retained for a short period to ensure security and improve functionality, except when a longer period is necessitated by law.

After the retention period elapses, your data will be securely deleted or anonymised.

Who Processes Your Data

To provide you with our services, Norbury Florist may share your personal data with selected third parties who act as data processors. These include:

• Payment service providers to process your payment securely.
• IT and software service providers who host and support our website or record keeping systems.
• Delivery partners where required to complete the delivery of your floral orders.
• Professional advisers where required for legal or regulatory compliance.

All third-party processors are subject to contractual obligations requiring them to protect your data, only process it in accordance with our instructions, and comply with GDPR standards. Norbury Florist does not share your data for purposes unrelated to the provision of our services. Your data is not sold to any third party.

Your Rights

Under the GDPR, you have a variety of rights concerning your personal data. These rights include:

• The Right to Access: You can request a copy of the personal data we hold about you.
• The Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
• The Right to Erasure: Also known as the ‘right to be forgotten’, you can request that we delete your data when it is no longer needed.
• The Right to Restrict Processing: You can request that we limit or stop the processing of your data in certain circumstances.
• The Right to Data Portability: You can ask us to transfer your data to another service provider where technically feasible.
• The Right to Object: You can object to certain types of processing, such as direct marketing.
• The Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time.

To exercise your rights, please contact us by the means indicated on our website. We will aim to respond to your request within one month and as required under GDPR regulations.

Security of Your Data

Norbury Florist implements suitable technical and organizational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. While we take all reasonable precautions, no system can be completely secure; please take care to protect your personal information, especially when communicating online.

Updating This Privacy Policy

We may amend this Privacy Policy from time to time to keep up with legal, regulatory, or operational requirements. Significant changes will be notified to customers using our usual communication channels. Please check this page periodically to stay updated on how your data is managed.

Contacting Norbury Florist

If you have any questions regarding this Privacy Policy or your personal data, or if you wish to exercise any of your rights, please reach out to us using the contact details provided on our website. Your privacy is important to us, and we are committed to resolving any concerns.