Aldgate Florist Privacy Policy

Introduction

This Privacy Policy explains how Aldgate Florist collects, uses, stores, and protects your personal data in the course of providing floral products and services. This policy applies to all individuals placing orders with Aldgate Florist, whether residing in Aldgate or the surrounding districts. We are committed to upholding your rights under the General Data Protection Regulation (GDPR) and ensuring responsible data management throughout our business operations.

What Personal Data We Collect

Aldgate Florist collects and processes various types of personal data to fulfill your floral orders and provide a pleasant shopping experience. Depending on your interaction with us, the data we may collect includes:

• Identity Data: Full name, title, and, where applicable, the name of the recipient for your order.
• Contact Data: Delivery address, billing address, telephone number, and other relevant location details.
• Order and Transaction Data: Details of products ordered, order amounts, purchase history, payment references, and delivery instructions.
• Payment Data: Partial payment card details (last four digits) and payment status, processed via secure third-party payment partners.
• Correspondence Data: Information you provide when contacting us by phone, in writing, or through a contact form.
• Technical Data: Website usage information including IP address, browser type, device information, date and time of visit, and cookies or similar technology used for site analytics and performance.

Lawful Basis for Processing Your Data

Aldgate Florist will only collect and process your personal data where there is a lawful basis to do so. These bases include:

• Contractual Necessity: We process your data to fulfill our contractual obligations, such as processing and delivering your floral orders and communicating with you about your purchase.
• Legal Obligation: In certain instances, we are legally required to process or store your data, for example, adhering to tax and accounting regulations.
• Legitimate Interests: We may process your data to improve our services, prevent fraud, protect our business, or ensure quality control, provided such interests are not overridden by your fundamental rights.
• Consent: For certain activities not covered above, such as direct email marketing or promotional updates, we will request your consent before processing your data. You can withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• To process, confirm, and deliver your floral order to the correct address and recipient.
• To communicate order updates, delivery confirmations, or important notifications regarding your order.
• For customer support and to handle any queries, complaints, or requests you may have.
• To manage billing, payments, invoicing, and accounting compliance.
• As part of our efforts to improve our business, optimize our website, and enhance your customer experience.
• To send marketing communications if you have provided explicit consent.

Retention of Your Data

Aldgate Florist will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally:

• Order and transaction data is retained for at least six years to comply with legal and tax obligations.
• Customer correspondence is retained for a reasonable period to address inquiries or resolve complaints.
• Data used for marketing is retained until you opt out or withdraw consent.
• Technical and analytical data is typically stored for shorter periods, unless required for security or regulatory purposes.

Our Data Processors

To provide our services effectively, Aldgate Florist uses trusted third-party suppliers (data processors) who may process your data on our behalf, always in accordance with our instructions and GDPR obligations. Examples include:

• Payment processing providers handling secure card transactions.
• Delivery and courier companies involved in delivering your order.
• IT and web hosting providers that support our website and internal systems.
• Customer support and contact management tools.
• Professional advisers such as accountants or legal consultants bound by confidentiality.

We require all our data processors to uphold strict security measures and to keep your information confidential. Data is never sold or shared for marketing purposes without your explicit consent.

International Data Transfers

In limited circumstances, your data may be processed outside the UK or European Economic Area (EEA). In such cases, Aldgate Florist ensures adequate protection of your data by using providers operating under recognized legal frameworks with appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

Your Data Protection Rights

As a customer of Aldgate Florist, your rights under the GDPR include:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: Where appropriate, you may ask us to delete your personal data.
• Right to Restrict Processing: You may ask us to restrict the processing of your data under certain circumstances.
• Right to Object: You may object to the processing of your data where we rely on legitimate interests or direct marketing.
• Right to Data Portability: You have the right to request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time, without affecting prior processing.

If you wish to exercise any of these rights, please contact us using the details provided on our website or by visiting us in person. We will respond to your request in line with applicable data protection laws.

Data Security

Aldgate Florist implements robust technical and organizational measures to safeguard your personal data from loss, unauthorized access, alteration, disclosure, or destruction. Staff are regularly trained on data privacy responsibilities, and we review our security practices periodically to maintain high standards of protection.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to our services. The latest version will always be available on our website, and, where appropriate, you will be notified of significant changes.

Contact and Complaints

If you have any questions or concerns regarding how your personal data is handled by Aldgate Florist, or if you wish to make a complaint, please get in touch with us through the contact details on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority should you be dissatisfied with our response.