Florist New Eltham Privacy Policy

Our Commitment to Your Privacy

At Florist New Eltham, we are dedicated to safeguarding your personal information. Our privacy policy is designed to help you understand what personal data we collect, how we use it, on what legal basis, with whom we may share it, how long we retain it, and how you can exercise your rights. We are committed to processing personal data in compliance with the General Data Protection Regulation (GDPR) and any applicable local data protection laws.

Who This Policy Applies To

This Privacy Policy applies to all customers who place orders with Florist New Eltham, whether through our website, over the phone, or in-store, for delivery in New Eltham and the surrounding districts. By submitting your personal data to us, you acknowledge you have read and understood this Privacy Policy.

What Personal Data We Collect

Depending on your interaction with Florist New Eltham, we may collect the following categories of personal data:

• Identity Data: such as your name, and, if you are acting on behalf of someone else, the recipient's name.
• Contact Data: including address, telephone number, and, where appropriate, delivery or billing address.
• Order Information: details of products and services you purchase or enquire about, including any message for a card or special instruction.
• Payment Information: necessary details to process payment for your order. We do not store full payment card details; these are handled securely by our payment processors.
• Technical Data: such as IP address, browser type, and device information if you interact with our website.
• Correspondence: records of your communications with us, including queries, feedback, or complaints.

How and Why We Use Your Data

We process your personal data solely for the following purposes:

• To process, fulfill, and deliver your orders as requested.
• To communicate with you regarding your orders or queries.
• To comply with legal obligations applicable to our business.
• To provide customer support and address concerns or complaints.
• To improve our services and enhance customer experience (analytical and statistical purposes).

Lawful Basis for Processing

Under the GDPR, we rely on the following lawful bases for processing your personal data:

• Performance of a Contract: Most data we collect is necessary to fulfill your order and provide the requested service.
• Legal Obligation: We may be required to retain some data to meet legal or regulatory requirements, such as record-keeping for tax purposes.
• Legitimate Interests: We may process certain non-essential data to improve our services and respond to customer feedback, provided such interests are not overridden by your rights and interests.
• Consent: Where you provide explicit consent (e.g., subscribing to marketing mailings), we process your data on that basis. You may withdraw your consent at any time.

Who Has Access to Your Data

Access to your personal data is strictly limited to staff of Florist New Eltham who require it to process your orders or provide customer service. In some cases, we may share necessary data with third parties, specifically:

• Payment Processors: Secure, reputable companies to process your payments; we do not retain card details.
• Delivery Partners: Sub-contractors or couriers involved in delivering your purchases, provided only with the information required to complete the delivery.
• IT or Systems Support Providers: Companies who ensure the security and functionality of our ordering system and website.
• Regulatory or Legal Authorities: Where disclosure is required by law.

All third-party providers are required to respect the confidentiality and security of your data and to process it in accordance with data protection legislation. We do not sell, trade, or rent your personal data to third parties.

How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include secure servers, access restrictions, and regular review of our data protection practices.

Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typically, personal data related to transactions is kept for six years from the end of the financial year in which the transaction occurred, in line with tax and accounting regulations. Where data is held based on consent (such as marketing), it will be retained until you withdraw your consent.

Your Data Protection Rights

Under the GDPR you have the following rights over your personal data:

• Access: Request access to your personal data and information about its processing.
• Rectification: Request correction of any inaccurate or incomplete data we hold about you.
• Erasure: Request deletion of your personal data where there is no lawful basis for continued processing.
• Restriction: Request restriction of processing in certain circumstances.
• Data Portability: Request the transfer of your data to another provider where feasible.
• Objection: Object to our processing of your personal data based on legitimate interests or direct marketing.
• Withdraw Consent: Where processing is based on your consent, you can withdraw this at any time without affecting the lawfulness of processing prior to withdrawal.

If you wish to exercise any of these rights, please contact us using the details provided in your order documentation or on our website. We may need to verify your identity before responding to such requests.

Changes to This Privacy Policy

We regularly review and update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The most current version is always available in-store and on our website. We encourage you to review the policy periodically.

Contacting Us

If you have any questions about this Privacy Policy, about how your personal data is handled, or if you wish to make a complaint, please contact us through the methods provided on our official documents or website. We take your privacy concerns seriously and will respond to queries as promptly as possible.

This Privacy Policy is effective for all orders and customer interactions with Florist New Eltham in New Eltham and surrounding districts as of the date of last review. Thank you for trusting us with your data.