Perivale Florist Privacy Policy

Name: CAPRI CALYPSO
Brand: Perivale Florist
Price: 64.50 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Perivale Florist ('we', 'us', 'our') collects, uses, retains, and shares your personal data when you place an order with us. The policy applies to all customers in Perivale and surrounding districts who use our services to order flowers, gifts, or related items.

What Information We Collect

When you place an order or contact us regarding our products or services, we may collect and process the following types of personal data:

Identifying Information: Name, delivery address, and contact details (such as telephone number).
Recipient's Information: Name, delivery address, and contact for the person receiving flowers or gifts.
Order Details: Nature of your order, any special instructions or messages, and delivery preferences.
Payment Information: Payment card details or other payment information. Note that payment card details are processed securely by our payment processor and are not stored by us.
Communication Records: Correspondence with us, including enquiries or complaints.
Technical Information: Information about your use of our website, such as IP address, browser type, and access times, collected via cookies and similar technologies where applicable.

Lawful Basis for Processing

We process your personal data in accordance with UK GDPR and Data Protection Act 2018. Our lawful bases include:

Contractual Necessity: To process and fulfil your orders for flowers or gifts, and provide customer support.
Legal Obligation: To comply with accounting, tax, and legal requirements.
Legitimate Interests: To improve our products and services, ensure the security of our website, and conduct direct marketing (when you have not opted out and it is not intrusive).
Consent: For direct marketing via email or text where you have expressly consented.

How We Use Your Data

Your personal data is used for the following purposes:

Processing orders and delivering flowers or gifts.
Personalising orders (e.g., your chosen messages).
Managing payments and refunds.
Responding to your queries or complaints.
Maintaining internal records for accounting, tax, and regulatory purposes.
Enhancing and improving our website and customer service.
Sending marketing or promotional communications, only where permitted.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Generally, this is up to 7 years after your last order for compliance with tax and accounting requirements, except where a longer/shorter retention is mandated or authorised by law. After this, your data will be securely deleted or anonymised.

Data Processors and Sharing

We may share your data with the following third-party processors solely for the purposes outlined in this policy:

Payment Service Providers: To securely process your payment details. These companies handle card transactions and do not share the contents of your card with us.
Delivery Partners: Couriers or postal providers who deliver your order.
IT Service Providers: Companies providing website hosting, maintenance, or customer management systems.
Professional Advisors: Accountants, legal representatives, or auditors as required for compliance and accountability.

We require all third-party processors to comply with data protection laws and to process your data securely and only for the specific purposes required.

We do not sell or rent your personal data to any third party. Data may be disclosed to law enforcement or regulatory bodies where required by law.

Your Data Protection Rights

Under the UK GDPR, you are entitled to certain rights regarding your personal data, including:

Right of Access: You may request access to a copy of your personal data processed by us.
Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to Restrict Processing: You can request restrictions on how we use your information under certain circumstances.
Right to Portability: You have the right to request the transfer of your data in a structured, machine-readable format.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where consent is the basis for processing, you can withdraw it at any time and we will stop processing your data for those purposes.
Right to Lodge a Complaint: If you believe your data has been processed unlawfully, you can complain to the UK Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us using our website's contact form or postal address. Please note we may ask you to verify your identity before responding to such requests.

Security Measures

We implement both technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include secure server technology, limited access controls, and staff training in data protection obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be reflected on this page. We encourage you to review this policy periodically to remain informed about how we collect and use your data.

Contact Information

If you have any questions or concerns about this Privacy Policy or your data, please reach out to us via our contact form or by post to our business address as listed on our website.