Camberwell Florist Privacy Policy

Introduction

This Privacy Policy outlines how Camberwell Florist collects, uses, and protects personal data provided by customers placing orders with us from Camberwell and surrounding districts. We are dedicated to safeguarding your information and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This policy serves to explain our practices transparently and your rights in relation to your personal data.

Scope of the Policy

This Privacy Policy applies to all individuals who place orders with Camberwell Florist, whether through our website, by phone, or in-store, and who reside in or order for delivery to Camberwell and nearby districts. By placing an order, you acknowledge and accept the terms detailed in this policy.

Personal Data We Collect

In order to process your orders and provide you with our services, we may collect and process the following types of personal data:

• Identity Data: Including your name, billing address, delivery address, and order details.
• Contact Data: Such as your phone number and, where applicable, your email address.
• Payment Data: Limited payment information as required to process transactions (e.g., last four digits of your card number; full payment details are processed via secure third-party payment processors).
• Order Details: The type of products ordered, purchase date, preferences, and messages for gift cards or recipient.
• Recipient Data: Details of the recipient such as name, delivery address, and contact details to fulfil your delivery instructions.
• Technical Data: Your IP address, browser type, operating system, and cookies, collected when you interact with our website, to ensure security and enhance user experience.

Purpose and Lawful Basis for Processing Personal Data

We process your personal data only where we have a legal basis to do so. The primary purposes and lawful bases include:

• Contractual Necessity: To process your orders, manage payments, deliver products, and provide customer service. Without this information, we cannot fulfil your order.
• Legal Obligations: To comply with accounting, tax, and regulatory requirements, or to respond to requests by authorities.
• Legitimate Interests: To improve our services, communicate service updates, and maintain the security of our website and operations. We balance these interests with your rights and freedoms, and you have the right to object to certain uses.
• Consent: Where we collect data for marketing communications, we do so only with your explicit consent. You can withdraw your consent at any time.

How We Use and Share Your Personal Data

Camberwell Florist uses your personal data solely for the purpose it was collected. Your data may be processed by trusted third parties ("processors") who support our business, such as payment service providers, delivery partners, website hosting and IT service providers. These processors are contractually obligated to maintain the security and confidentiality of your data and must not use it for any other purpose.

We do not sell your personal information to third parties. We may disclose your data where required by law or if necessary for legal claims or to enforce our terms and conditions.

Data Retention

Your personal data will be retained only as long as necessary to fulfil the purposes described above, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. In general, customer data related to orders is held for up to 7 years to comply with tax and accounting obligations. Technical data such as cookies may be held for shorter periods, determined by the cookie’s purpose.

Once retention periods expire, we securely delete or anonymise your data.

Your Rights Under GDPR

As a customer placing an order with Camberwell Florist serving Camberwell and the surrounding districts, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you may ask us to correct or update it.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data, unless we are required by law to retain it.
• Right to Restrict Processing: You may ask us to pause the use of your data (e.g., to verify its accuracy or our processing grounds).
• Right to Data Portability: You can receive an electronic copy of your data in a structured, commonly-used format or request that we transmit it to another provider.
• Right to Object: You may object to the processing of your data based on legitimate interest or direct marketing communications, at any time.
• Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw this at any time.

Our Data Processors

Camberwell Florist partners with reputable data processors to aid in secure and efficient order fulfilment and business operations, including:

• Payment service providers (to process transactions securely)
• Courier and delivery companies (to deliver your orders)
• IT and website service providers (to host and maintain our website and databases)
• Accountancy and regulatory bodies (for legal obligation and financial compliance)

We carefully select our processors to ensure appropriate technical and organisational measures are in place for your data protection.

How We Protect Your Information

The security of your personal data is important to us. We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, misuse, or disclosure. These include, but are not limited to, secure storage, encryption of electronic data, access controls, and regular staff training on data protection best practices.

Updates to This Policy

We may update this Privacy Policy occasionally to reflect changes in our practices, legal requirements, or technology. Any amendments will be published on our website and are effective upon posting. We encourage you to review this policy periodically to stay informed about how we protect your data.

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your GDPR rights, or have any concerns about the way your data is being handled, please use our online contact form or visit us in-store to speak directly with our data privacy representative. We are committed to addressing your needs promptly and transparently.