Florist Bankside Privacy Policy

Introduction

This Privacy Policy explains how Florist Bankside collects, uses, stores, and protects your personal data when you place orders with us from Bankside and the surrounding districts. Your trust is important to us, and we are committed to ensuring your privacy and complying with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws.

Scope of this Privacy Policy

This policy applies to all customers placing orders with Florist Bankside from Bankside and the surrounding districts, regardless of the method of ordering—whether online, in-store, or by telephone. The policy describes our practices regarding your personal data throughout our relationship with you.

What Data We Collect

We collect the following types of personal data from customers:

• Contact Details: Your name, address, phone number, and, where provided, email address.
• Order Information: Details of your orders, including delivery address, product selections, recipient's name and address, and order messages or notes (such as card messages).
• Payment Information: Transaction details (processed securely via third-party payment processors; we do not retain full card details).
• Customer Communication: Records of your communications with us, including order queries, feedback, and complaints.
• Website Usage Data: When you access our website, certain information is collected via cookies and similar tracking technologies (see our Cookie Policy for details).

Lawful Basis for Processing

Florist Bankside ensures that your personal data is processed only where a lawful basis exists under GDPR. The primary lawful bases are:

• Contractual Necessity: We process your data to fulfil your order and provide related services, such as order confirmation and delivery updates.
• Legitimate Interests: For purposes such as improving our services, handling customer enquiries, and maintaining our relationship with you.
• Legal Compliance: To satisfy legal obligations, for example, the need to maintain proper records for accounting and tax purposes.
• Consent: Where we seek to send you marketing communications, we will obtain your explicit consent, and you can withdraw this consent at any time.

Data Sharing and Processors

Florist Bankside will not sell or rent your personal data. However, we may share your data with trusted third-party processors who assist us in fulfilling our services. These include:

• Payment Service Providers: To process your transactions securely.
• Delivery Partners: For arranging deliveries to the address you specify.
• IT Service Providers: For website operation, hosting, email management, and order system maintenance.
• Legal or Regulatory Authorities: If required by law or in order to protect the rights and safety of our business, employees, or customers.

All third-party processors are contractually bound to protect your data in accordance with this Privacy Policy and GDPR requirements and may only process your data for the specified purpose.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods are as follows:

• Order Information: Retained for up to 7 years to comply with HMRC and financial record-keeping obligations.
• Customer Communications: Retained for as long as necessary to resolve issues and for general customer service, typically no longer than 2 years.
• Marketing Data: Retained for as long as you remain opted in. If you withdraw consent, this data will be deleted or anonymised promptly.

At the end of the relevant retention periods, your personal data is securely deleted or anonymised.

How We Protect Your Data

Your data security is a priority. Florist Bankside uses industry-standard security measures, including encryption, restricted access, and secure storage systems to safeguard your information. Staff handling your data are trained in data privacy and are subject to confidentiality agreements. In the event of any suspected data breach, we will notify you and any applicable regulator as required by law.

Your Rights

Under GDPR, you have several rights over your personal data:

• Access: The right to ask for a copy of your personal data we hold.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your data where there is no longer justification for its retention.
• Restriction: The right to ask us to limit how your data is used.
• Portability: The right to request the transfer of your data to another service provider.
• Objection: The right to object to our use of your data in certain circumstances, such as for direct marketing.
• Withdraw Consent: The right to withdraw your consent to marketing communications at any time.

To exercise any of these rights, please contact Florist Bankside using the contact methods provided on our website or at our premises. We will respond to your request within one month, as required by law.

Children’s Privacy

Florist Bankside does not knowingly collect personal data from children under the age of 16. If we become aware that we have collected such data without parental consent, we will take appropriate steps to delete it promptly.

Changes to this Policy

This Privacy Policy may be updated periodically to reflect changes in legal, regulatory, or operational requirements. We recommend that you review this policy periodically for any updates. Where significant changes occur, we will take reasonable steps to notify you.

Contacting Us

If you have questions about this Privacy Policy or how Florist Bankside processes your personal information, please get in touch via the contact information available on our website or visit us in store at Bankside.