Florist Lee GDPR Privacy Policy

Introduction

This Privacy Policy explains how Florist Lee collects, uses, stores, and protects your personal data when you place an order with us, either in Lee or in surrounding districts. We are committed to processing your information in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This policy sets out your rights as a data subject and outlines our practices regarding the collection, use, and retention of your data.

Scope of this Policy

This policy applies to all customers who place orders with Florist Lee, whether directly, online, or via the phone, in Lee and its surrounding districts. By placing an order, you confirm that you have read and understood this Privacy Policy.

What Data We Collect

We collect information necessary to process your order and provide our services. This typically includes the following categories of personal data:

• Identity Data: Your full name.
• Contact Data: Delivery address, billing address, and contact number (if provided).
• Order Data: Details of the products you order, messages included for recipients, and delivery preferences.
• Transaction Data: Payment and billing details (note that full card details are handled securely by regulated payment processors and are not stored by Florist Lee).
• Communication Data: Any correspondence between you and Florist Lee related to your order.

We do not knowingly collect personal data from children under the age of 18 without parental consent.

Lawful Basis for Processing

We always process your personal information under one or more of the lawful bases provided by the GDPR:

• Contractual Necessity: Processing your data is necessary to fulfill your order and to provide customer service.
• Legal Obligation: Certain information may be collected and retained to meet our legal obligations, for example for tax and accounting purposes.
• Legitimate Interests: We may process your data for our legitimate business interests (for example, to improve our services or prevent fraud), provided it does not override your rights and freedoms.
• Consent: For any purpose not described above, we will seek your explicit consent before processing your data.

How We Use Your Data

Florist Lee will use your data for the following purposes:

• To process, deliver, and fulfill your floral orders.
• To send you communications about your order status or to address any issues with your order.
• For internal record keeping, auditing, and to comply with legal obligations.
• If you have given your consent or where we have a legitimate interest, to contact you regarding promotions or offers; you may opt out at any time.

Data Retention

Florist Lee will retain your personal data only for as long as necessary for the purposes for which it was collected, including for fulfilling your order, dealing with any queries, and meeting any legal, accounting, or reporting requirements. Typically:

• Order and customer records are retained for up to 6 years to comply with regulatory and tax obligations.
• Communications regarding complaints or disputes may be stored until the matter is resolved and for a reasonable period thereafter as required by law.
• Data used for marketing will be retained until you withdraw your consent or opt out.

When personal data is no longer required, it is securely deleted or anonymised.

Processors and Third Parties

Florist Lee occasionally engages trusted third-party processors to support our service delivery, such as IT service providers, payment processors, and courier companies. These third parties process your data only as necessary and under contractual obligations to safeguard your privacy. They may only use your data for the purposes instructed by Florist Lee and in compliance with GDPR.

We do not sell, rent, or trade your personal data to any other organisations or individuals. We will only disclose your personal information as required by law or where strictly necessary to fulfill your order.

Your Data Subject Rights

You have the following rights under the GDPR:

• Right to Access: Request access to your personal data and receive a copy.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your data in certain circumstances (also known as the 'right to be forgotten').
• Right to Restrict Processing: Request a temporary halt to data processing where you have contested its accuracy or objected to its processing.
• Right to Data Portability: Request to receive your personal data in a structured, commonly used, machine-readable format, or have it transmitted to another controller.
• Right to Object: Object to processing of your personal data where we are relying on legitimate interests, including for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect processing carried out prior to withdrawal.

If you wish to exercise any of these rights, please contact us using the contact details provided on our website or in-store. We may need to verify your identity before responding to your request to protect your privacy and security.

Data Security

Florist Lee employs appropriate technical and organisational measures to secure your personal data from unauthorised access, disclosure, alteration, or destruction. This includes limiting access to your data to only those employees and service providers who need it to fulfill their duties, using secure payment portals, and ensuring physical and digital security of our records.

Updates to this Policy

This Privacy Policy may be updated from time to time to reflect changes in our business practices, legal requirements, or for other operational reasons. Any changes will take effect as soon as they are posted on our website. We encourage you to review the policy periodically.

Contact and Complaints

If you have any questions or concerns about how your data is handled, or if you wish to lodge a complaint, please use our contact details found on our website or ask in-store. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

Summary

Your trust is important to us. Florist Lee takes your privacy seriously and is committed to protecting your personal data in line with GDPR. We encourage you to read this policy carefully and reach out to us if you have any questions regarding your data rights.