Barbican Florist Privacy Policy for Customers

Introduction

This Privacy Policy explains how Barbican Florist collects, uses, stores, and protects personal information from customers who place flower orders in Barbican and the surrounding districts. We are committed to processing your personal data in accordance with the General Data Protection Regulation (GDPR) and ensuring your privacy and security.

Scope of Policy

This policy applies to all individuals who purchase goods or services directly from Barbican Florist, whether in person, by phone, or through our website, and who have their orders delivered to Barbican or the surrounding districts. This includes one-time customers, repeat purchasers, and recipients of floral deliveries where information may be provided by the ordering customer.

What Personal Data We Collect

To provide our services, we may collect and process the following types of personal data:

• Identity Information: Name, title, and in some cases, proof of identity (if necessary for order verification).
• Contact Details: Delivery address, billing address, telephone numbers, and postal codes.
• Order and Transaction Details: Records of your flower orders, recipient's delivery details, payment status, and purchase history.
• Payment Information: Details required for processing payments (note: we do not store full payment card details, but our payment processor may retain some transaction data in a secure, PCI-compliant manner).
• Communications: Copies of your correspondence with us, including inquiries, feedback, and special instructions.
• Marketing Preferences: Consent choices regarding receipt of promotional materials, where applicable.

Lawful Basis for Processing Your Data

Barbican Florist processes your personal data under the following lawful bases as defined by the GDPR:

• Contractual Necessity: We collect and process your data in order to fulfill flower purchases, process payments, and make deliveries as part of our service contract with you.
• Legal Obligation: Certain information may be retained to comply with applicable laws, such as tax and accounting regulations.
• Legitimate Interests: We may process your data for our legitimate business interests, such as improving our products and services, preventing fraud, and responding to your requests, provided these interests do not override your data protection rights.
• Consent: Where required (for example, for marketing communications), we will process your data based on your explicit consent, which you may withdraw at any time.

How We Use Your Personal Data

Your personal data is used strictly for purposes relevant to our florist business, such as:

• Fulfilling your flower order and providing confirmation and updates.
• Communicating with you about your order or any issues affecting delivery.
• Processing payments securely through our payment processor.
• Complying with applicable laws and regulations.
• Sending you occasional service or marketing communications, only with your consent (where required).
• Improving our services by analyzing transaction trends and feedback.

How We Share Your Information

We may share your personal data with selected third parties under the following circumstances:

• Payment Providers: For secure transaction processing.
• Delivery Partners: Couriers or local delivery staff who require address and contact details to fulfill your order.
• IT and Service Providers: Companies providing web hosting, order management, or technical support, bound by confidentiality and data protection obligations.
• Regulatory or Legal Authorities: If required to comply with legal obligations or respond to lawful requests.

We do not sell or rent your personal data to third parties for marketing purposes.

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom or European Economic Area (EEA). On rare occasions where service providers operate outside these locations, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information in accordance with GDPR requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Typically, order and transaction records are retained for up to six years to comply with regulatory requirements. At the end of the retention period, personal data is securely deleted or anonymised.

Processors and Safeguarding Measures

Barbican Florist uses reputable external processors to assist with certain services such as payment processing, website hosting, and order management. All processors are carefully selected to ensure they adhere to GDPR standards and have appropriate technical and organizational measures to protect your data. Contracts with these data processors require them to process your information only for specified purposes and under our instructions.

Your Data Protection Rights

Under the GDPR, you have several rights regarding your personal data. These include:

• Right to Access: You can request a copy of your personal data held by us.
• Right to Rectification: You can request correction of any inaccurate or incomplete information.
• Right to Erasure: In certain circumstances, you can request deletion of your personal data.
• Right to Restrict Processing: You can ask us to pause processing in specific situations.
• Right to Data Portability: Where applicable, you can request the transfer of your data to another service provider.
• Right to Object: You can object to our processing of your data on the basis of legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights, please contact us using the information provided at the end of this policy. We may require you to verify your identity before responding to such requests.

Data Security

Barbican Florist recognises the importance of data security and has implemented appropriate organisational and technical measures to protect your personal data against unauthorised access, loss, misuse, or alteration. These measures include secure servers, encrypted payment processes, staff training, and regular review of our security practices.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal or regulatory requirements. The most current version will always be available where you place orders. Continued use of our services constitutes your acceptance of any such changes.

Contact for Concerns and Complaints

Should you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our designated Data Protection contact point. You also have the right to lodge a complaint with the Information Commissioner's Office or your relevant data protection authority if you believe your rights have been violated.