Florist Belmont Privacy Policy

Introduction

This Privacy Policy describes how Florist Belmont ("we", "our", "us") collects, uses, stores, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with Florist Belmont from Belmont and surrounding districts. By placing an order with us, you acknowledge that you have read and understood this Privacy Policy.

What Personal Data We Collect

To provide you with our floral products and related services, we may collect the following types of personal data:

  • Identity Data: such as your name and, if acting on behalf of someone else, recipient's name.
  • Contact Data: including delivery address, billing address, phone numbers, and any contact details you provide.
  • Order Data: purchase details (e.g., items ordered, preferences, delivery instructions, order history).
  • Payment Data: including a record that payment was completed (we do not store full credit/debit card numbers).
  • Communications Data: any correspondence you may have with us, including inquiries and feedback.
  • Technical Data: information about how you access and use our platform (e.g., IP address, browser type, device type).

Lawful Basis for Processing Personal Data

We process your personal data under the following lawful bases as defined by the GDPR:

  • Contractual Necessity: Where processing is required to fulfill our contract with you, such as to process, deliver, and manage your orders.
  • Legal Obligation: Where we have a legal obligation to retain records and comply with applicable laws and regulations (for example, accounting and tax requirements).
  • Legitimate Interests: Where our legitimate interests do not override your rights and freedoms. This includes improving our services, preventing fraud, or handling customer inquiries.
  • Consent: In some cases, we may ask for your explicit consent (e.g., for marketing communications). You may withdraw your consent at any time where we rely on it as a lawful basis.

How We Use Your Information

Your personal data is used for:

  • Processing, confirming, and delivering your orders
  • Managing your customer relationship, including answering your queries and feedback
  • Administrative, accounting, and record-keeping purposes
  • Informing you of any issues with your order or delivery
  • Improving our products, services, and customer experience
  • (If opted-in) Sending you information regarding promotions, offers, or updates
  • Complying with legal and regulatory requirements

Data Retention

We will retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy. In particular:

  • Order & Transaction Data: Retained for up to 7 years from the completion of your order, to comply with legal, tax, and accounting requirements.
  • Marketing Data: Retained until you withdraw your consent or unsubscribe, whichever occurs sooner.
  • Other Correspondence: Retained for a maximum of 2 years unless related to an ongoing dispute or legal requirement.

After the relevant retention period, your personal data will be securely deleted or anonymized.

Data Processors and Third Parties

We may utilize trusted third-party service providers (data processors) to help us deliver our services and run our business. Data is only shared with processors necessary for:

  • Payment processing (e.g., third-party payment gateways)
  • Delivery of goods (e.g., local couriers and logistics partners)
  • Order management and administration tools
  • IT maintenance and support services
  • Legal or regulatory authorities, if required by law

All processors are required to adhere to data protection regulations and are contractually obliged to protect your data, ensuring it is processed only for specified purposes.

Your Rights under GDPR

As a customer ordering from Belmont or surrounding districts, you have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure: In certain cases, you may request that we delete your data.
  • Right to Restrict Processing: You may request us to limit the processing of your data under specified circumstances.
  • Right to Data Portability: You may ask to receive your data in a commonly used format or to have it transmitted to another controller.
  • Right to Object: Where we process your data for legitimate interests or direct marketing, you may object to such processing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time; this will not affect processing carried out before withdrawal.
  • Right to Lodge a Complaint: You have the right to complain to the data protection authority if you believe your privacy rights have been violated.

Data Security

We implement appropriate technical and organizational measures to safeguard your personal information. This includes secure payment systems, password-protected data access, and staff training on data protection. While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is completely secure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to comply with changes in laws or our data processing practices. Updates will be posted on our website with a new effective date. We encourage you to review this policy when placing new orders.

Contacting Us

If you have any questions about this Privacy Policy or how your personal data is handled by Florist Belmont, please use our contact form or visit us at our premises during business hours. We are committed to addressing your inquiries promptly and transparently.