Docklands Florist Privacy Policy

Introduction

This Privacy Policy describes how Docklands Florist handles personal data collected from customers placing orders in Docklands and surrounding districts. Our commitment is to protect your privacy and to comply fully with the General Data Protection Regulation (GDPR) and relevant UK Data Protection laws.

Scope of This Policy

This policy applies to all individuals who place an order with Docklands Florist, either directly or through our website, and who are located within Docklands or the surrounding districts. By placing an order, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

What Data We Collect

At Docklands Florist, we collect the following categories of personal data when you place an order:

• Identification Information: Name, contact details (such as address, delivery address, postcode, and telephone number)
• Order Details: Product selections, delivery instructions, payment records, and order history
• Payment Information: Payment card details are processed securely via our payment processors and are not stored by Docklands Florist
• Communication Data: Correspondence with customer service, feedback, and reviews
• Technical Data: IP address, browser type and version, time zone setting, and device information (when you use our website)

Lawful Basis for Processing Personal Data

Docklands Florist processes your personal data under the following lawful bases as defined by the GDPR:

• Contractual Necessity: Processing your personal data is necessary to fulfill your order and to provide services or products as requested.
• Consent: Where you have provided specific consent, such as for receiving marketing communications or promotions from us.
• Legal Obligation: To comply with our legal and regulatory obligations (for example, for tax or accounting records).
• Legitimate Interests: For purposes such as customer service improvement, fraud prevention, network and information security, and analysis of trends, provided these interests do not override your rights and freedoms.

Retention of Personal Data

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods are as follows:

• Order and Transaction Data: Retained for up to 7 years to comply with tax and accounting regulations.
• Customer Service Correspondence: Retained for up to 2 years from the date of your last inquiry.
• Marketing Preferences: Retained until you withdraw your consent or unsubscribe from our communications.
• Technical Data: Retained for no longer than 12 months for analytical purposes.

After these periods, your data is securely deleted or anonymised so that you cannot be identified.

Data Processors and Third Parties

Docklands Florist engages certain trusted third-party suppliers (known as data processors) to assist with your orders and to operate our business effectively, while ensuring data protection compliance. Examples include:

• Payment Service Providers: To securely process payments for orders placed.
• Delivery Partners: To ensure flowers and gifts are delivered to your chosen address.
• IT and Website Maintenance Providers: For hosting, security, and enhancement of our digital infrastructure.
• Marketing Service Providers: Only if you have opted-in to receive promotional communications from Docklands Florist.

All processors are contractually required to implement appropriate security measures and to process your data strictly in accordance with our instructions and applicable GDPR requirements. We do not sell, rent, or share your personal data for third-party marketing purposes.

Your Rights Under GDPR

You have important rights under GDPR with regard to your personal data, including:

• Right to Access: You can request a copy of your personal data held by Docklands Florist.
• Right to Rectification: If the information we hold about you is inaccurate or incomplete, you can ask us to correct it.
• Right to Erasure: You can request the deletion of your personal data under certain circumstances, such as where data is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You may ask us to suspend the processing of your personal data for specific reasons.
• Right to Data Portability: Where applicable, you can request your data in a structured, commonly used format to be transferred to another provider.
• Right to Object: You have the right to object to processing where we rely on legitimate interests or for direct marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Right to Lodge a Complaint: If you believe we are not handling your data lawfully, you can contact the relevant supervisory authority in the UK.

To exercise your rights, please contact us using the details provided on our website or at the store. Verification of your identity may be required before fulfilling your request.

How We Safeguard Your Data

Docklands Florist takes the security of your personal data seriously. We implement industry-standard technical and organisational measures to protect against unauthorised access, disclosure, alteration, or unlawful destruction of your information. These measures include access controls, encrypted communications, and secure storage solutions. Additionally, we regularly review our data protection policies and employee training practices.

Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our business processes. Any changes will take effect immediately upon publication on our website. Please check this page periodically for the latest information.

Contacting Docklands Florist

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, you are welcome to contact us in person at our store or via the contact details published on our website.