Privacy Policy for Camden Florist Customers
Introduction
At Camden Florist, we are dedicated to safeguarding the privacy of our customers. This Privacy Policy outlines how we manage, process, and protect your personal data as required under the General Data Protection Regulation (GDPR). This policy applies to all individuals placing orders with Camden Florist, whether online, in-store, or via telephone, within Camden and the surrounding districts.
Data We Collect
When you interact with Camden Florist, we collect only the personal data necessary to fulfill your order and provide a seamless customer experience. The types of data we may collect include:
- Contact Information: Name, address, delivery address, and telephone number.
- Order Details: Flower and product selections, delivery messages, and special instructions.
- Payment Information: While we process payments through third-party payment processors, we may receive confirmation of successful payment transactions from them.
- Account Data: If you create an account with us, we collect login credentials, order history, and preferences.
- Communications: Any correspondence, feedback, or information you provide when contacting our customer service team.
We do not knowingly collect data from children below the age of 16 without appropriate parental consent.
Lawful Basis for Processing
Camden Florist only processes personal data where there is a lawful basis under GDPR, which may include:
- Contractual Necessity: To process and fulfill your orders, arrange delivery, and manage payments.
- Legal Obligation: To comply with obligations such as record-keeping for taxation or regulatory purposes.
- Legitimate Interests: To improve our services, ensure customer satisfaction, or protect against fraud, considering that these interests do not override your own rights and freedoms.
- Consent: Where required, such as for marketing communications. You may withdraw your consent at any time.
How We Use Your Data
Your data is used for the following purposes:
- To process your flower orders and deliver products to your chosen address.
- To communicate order updates, confirmations, or queries related to your purchase.
- To manage customer accounts, respond to inquiries, and handle feedback or complaints.
- If you have provided consent, to send you updates, promotions, or marketing information relevant to Camden Florist.
- To comply with any applicable legal and regulatory requirements.
Your data will not be used for automated decision-making or profiling.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, accounting, or reporting requirements. In general:
- Order records and related personal data are kept for up to 7 years, primarily for accountancy and taxation purposes.
- If you maintain an account with us, we retain your data until you request its deletion, after which we delete your data unless we are required to retain certain information by law.
- For marketing communications, we retain your consent preferences until you withdraw your consent or request deletion.
Upon expiry of these periods, your data will be securely deleted or anonymised.
Data Processors and Sharing
Camden Florist may occasionally work with trusted third-party service providers (data processors) to support our operations. These may include:
- Payment processors to facilitate secure card payments.
- IT and cloud service suppliers to store and back up order information and customer records.
- Delivery partners and couriers for the fulfillment of orders to your specified address.
All third-party processors are required to process your personal data only as instructed and to protect its integrity and confidentiality. We do not sell your personal information to third parties.
Your personal data will not be transferred outside the United Kingdom or European Economic Area unless adequate protections, consistent with GDPR, are in place.
Your Rights
Under the GDPR, you have several important rights regarding your personal data:
- Right of Access: You can request access to, and a copy of, the personal data we hold about you.
- Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data.
- Right to Erasure: In some circumstances, you have the right to request that we erase your data ('right to be forgotten').
- Right to Restrict Processing: You may request a restriction on the processing of your data where you have reason to do so.
- Right to Data Portability: You can ask us to transfer your data to another service provider, where technically feasible.
- Right to Object: You may object to certain types of processing, such as direct marketing.
- Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw this at any time.
To exercise any of these rights, please contact our data protection representative using the contact methods on our website or in-store.
Security Measures
We have implemented suitable security policies, rules, and technical measures to protect the personal data we process from loss, misuse, or unauthorised access. Only authorised Camden Florist staff or carefully vetted third-party contractors have access to your information on a need-to-know basis.
Policy Updates
Camden Florist may revise this Privacy Policy from time to time. Any changes will be posted on our website, and where appropriate, you will be notified of significant updates. We encourage you to review this policy regularly to remain informed about how we protect your privacy.
Contact and Complaints
If you have any questions or concerns regarding your personal data or wish to exercise your GDPR rights, please get in touch with us using the details provided through our official website or at our Camden store. If you are not satisfied with how your request or complaint is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
This Privacy Policy was last updated in June 2024.
