Florist Crayford Privacy Policy

Our Commitment to Your Privacy

At Florist Crayford, we are dedicated to protecting the privacy and personal data of all our customers who place orders from Crayford and its surrounding districts. This Privacy Policy explains how we collect, use, store, and safeguard your personal information in accordance with the UK General Data Protection Regulation (GDPR). Please read this policy carefully to understand your rights and how your data is managed.

Scope of This Policy

This Privacy Policy applies to all individuals who purchase products or services from Florist Crayford, whether ordering online, by phone, or in person, if the order is being fulfilled in Crayford or the surrounding districts. It explains the types of data we collect, the purpose for collection, how we process this data, the retention period, and the rights you have regarding your personal information.

What Data We Collect

When you interact with Florist Crayford, we may collect the following types of personal data:

• Identification Information: Name, title, and contact details (such as address, telephone number, and, where applicable, email address).
• Order Details: Delivery address, recipient’s name, personal messages included with floral deliveries, and any special delivery instructions provided.
• Payment Information: Transaction information necessary for order fulfilment, but we do not store complete payment card numbers. Payment is managed securely through third-party payment processors.
• Usage Data: Pages visited on our website, device information, and information gathered through cookies where applicable and consented to.
• Communication Data: Records of correspondence with us such as enquiries and customer service requests.

Lawful Basis for Processing Your Data

Under GDPR, we must have a valid legal reason to use your personal data. Florist Crayford processes your data under the following lawful bases:

• Contractual Necessity: We process your data to fulfil our contract with you, i.e., to process and deliver your floral orders and provide related services.
• Legitimate Interests: Some processing is necessary for our legitimate business interests, such as enhancing our service, handling customer support queries, or basic analytics. We always ensure these interests do not override your privacy rights.
• Legal Obligations: Certain information may be processed to comply with our legal or regulatory obligations.
• Consent: In some cases, such as optional marketing communications, we will ask for your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal information is used for the following purposes:

• To process orders, arrange deliveries, and communicate order status.
• To provide customer support, resolve issues, and respond to enquiries.
• To meet our legal, accounting, or reporting obligations.
• To improve our website, products, and services through analysis of usage data.
• If opted-in, to send promotional offers and information about products or events related to Florist Crayford.

Data Retention

We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by relevant legislation. Typically, customer order and payment data are held for a period of up to six years to comply with accounting and tax regulations. Non-essential data, such as marketing communication preferences, will be kept until you withdraw your consent or request erasure.

Data Processors and Third Parties

Florist Crayford may share your data with trusted third parties only as needed for the following reasons:

• Payment Processors: To securely process payments for orders placed.
• Delivery Services: To fulfill your orders and manage deliveries effectively, sharing only necessary information for order completion.
• IT Service Providers: To support our website and maintain system security.

All data processors engaged by us are required to adhere to GDPR and ensure the security and confidentiality of your data. Personal data is never shared with unaffiliated third parties for their own marketing purposes.

Your Rights Under GDPR

Under the GDPR, you have important rights regarding your data. These include:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If you believe your information is incorrect or incomplete, you can ask us to update or correct it.
• Right to Erasure: Also known as the "right to be forgotten," you may request we erase your data when it is no longer required or if processing is based on consent you withdraw.
• Right to Restrict Processing: You can ask us to restrict how we use your information in certain circumstances.
• Right to Object: You have the right to object to our processing of your personal data under legitimate interests or for direct marketing.
• Right to Data Portability: Where applicable, you may request your data is provided in a machine-readable format and transferred to another provider.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw this at any time.

To exercise any of these rights, please contact us using the contact channels provided on our website. We may require proof of identity to respond to your request.

Security of Your Data

We implement industry-standard safeguards to protect your personal information, including encrypted transmission of data, secure storage, and access controls. Our procedures are regularly reviewed to ensure compliance and protection against loss, unauthorised access, or misuse.

Changes to This Policy

Florist Crayford may update this Privacy Policy occasionally to reflect changes in our legal obligations or how we process personal data. The updated version will always be posted on our website with the date of revision indicated. We recommend reviewing this policy periodically, especially when placing new orders.

Contacting Florist Crayford

If you have questions or wish to exercise your data rights, you may contact us via the details available on our website or in-store. If you believe your data has not been handled in accordance with data protection law, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).