Alperton Florist Customer Privacy Policy

Introduction

At Alperton Florist, we are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and relevant data protection laws. This Privacy Policy explains how we collect, use, store, and protect your information when you place an order with us, whether you are in Alperton or the surrounding districts. Our Policy applies to all customers ordering products or services from us.

What Data We Collect

When you place an order or interact with our services, we may collect and process the following categories of personal data:

• Identity Data: Your name, title, and contact details.
• Contact Data: Delivery address, billing address, and telephone number (if provided).
• Order Data: Details of the products or services you purchase, order history, and delivery instructions.
• Payment Data: Payment method and transaction information. Please note we do not store your full payment card details; these are handled securely by our payment processors.
• Correspondence Data: Any communications you send us, including messages about orders, feedback, and customer service queries.

Lawful Basis for Processing Your Data

We process your personal data only where a lawful basis applies. These include:

• Contractual Necessity: We require certain information to process and deliver your order, fulfil our contractual obligations, and manage payments.
• Legal Obligation: We may process data to comply with legal and regulatory requirements, such as tax and accounting regulations.
• Legitimate Interests: We process your personal data to improve our services, respond to your queries, and ensure the security of our website and processes. We always balance our legitimate interests with your rights and freedoms.
• Consent: In specific cases, such as marketing or promotional communications, we may request your explicit consent. You can withdraw your consent at any time.

How We Use Your Personal Data

Your data is used for purposes such as:

• Processing and delivering your floral orders.
• Managing your customer account (if applicable).
• Handling payment transactions and refunds.
• Communicating with you regarding your order and responding to your inquiries.
• Improving and personalizing your customer experience.
• Meeting our legal and regulatory obligations.

How We Store and Protect Your Data

We are dedicated to ensuring the security and confidentiality of your personal information. We implement technical, organizational, and security measures appropriate to the sensitivity of the data we handle. Access to your data is restricted to authorized personnel and processors who require it for legitimate business purposes. All data is stored within secure systems located in the United Kingdom or within the European Economic Area (EEA).

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting obligations. The retention period depends on the type of data and the context in which it was provided. For example:

• Order Information: Typically kept for seven years to comply with tax and accounting regulations.
• Customer Correspondence: Retained for up to three years after your last contact with us.
• Marketing Preferences: Held until you withdraw your consent.

Once retention periods expire, your personal data is securely deleted or anonymized.

Data Processors and Third Parties

We may engage trusted third-party service providers ("processors") to perform tasks on our behalf, such as payment processing, order delivery, IT support, and website hosting. We ensure that they process your data only on our instructions and in line with GDPR requirements. All processors are carefully vetted for their data protection practices.

Your personal data is never sold or rented. We only share your information with third parties where necessary to deliver your order or fulfil our legal obligations. Third parties may include:

• Payment service providers for the secure processing of your transactions.
• Delivery companies and couriers handling your floral orders.
• IT and system administration professionals who support our business operations.
• Regulatory bodies, if legally required.

Your Rights Under GDPR

As a data subject under GDPR, you have a range of rights concerning your personal data:

• Right to Access: You can request a copy of your personal information held by us.
• Right to Rectification: You have the right to correct or update incomplete or inaccurate data.
• Right to Erasure: You can ask us to erase your data in certain circumstances ("right to be forgotten").
• Right to Restrict Processing: You may request us to limit the way we use your data.
• Right to Object: You can object to certain types of processing, such as receiving direct marketing.
• Right to Data Portability: You are entitled to receive your personal data in a structured, commonly used, machine-readable format and transfer it to another organisation.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You have the right to file a complaint with the Information Commissioner’s Office (ICO) or relevant supervisory authority.

Scope of This Policy

This Privacy Policy applies to all individual customers placing orders with Alperton Florist from Alperton and surrounding districts. It covers data collected through any communication channel where orders are placed, including in-store, by telephone, or online (where applicable). The Policy does not apply to business clients or third-party vendors acting on their own behalf.

Updates to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. Significant changes will be communicated where appropriate. The latest version will always be available at our premises and upon request.

Contact and Further Information

If you have questions regarding this Privacy Policy or wish to exercise any of your data protection rights, please contact us at Alperton Florist or visit us in-store. We are committed to answering your queries and addressing any concerns you may have about your privacy and data security.