Florist Bow Privacy & Data Protection Policy

Introduction

This Privacy and Data Protection Policy explains how Florist Bow collects, uses, stores, and protects your personal data when you place orders for our floral services in Bow and surrounding districts. We are firmly committed to protecting the rights and privacy of our customers in accordance with the General Data Protection Regulation (GDPR) and other relevant UK laws. This policy applies to all individuals placing orders with Florist Bow.

What Data We Collect

When you place an order through Florist Bow, we collect various types of information necessary to process and deliver your order efficiently, ensure transaction security, and provide customer service. The personal data we may collect includes:

• Identity and Contact Details: Name, delivery address, billing address (if different), and contact number.
• Order Details: Products purchased, delivery instructions, order amounts, and any personal messages attached to your order.
• Payment Information: Details required to process your payment (typically handled securely by our payment processor; Florist Bow does not store full card details).
• Communications: Information contained in your enquiries, service feedback, or correspondence with our support team.
• Website Usage Data: When you visit our website, we may collect technical data such as your IP address, browser type, and information about your visit through cookies or similar technologies. This is used to improve your experience and site functionality.

Lawful Basis for Processing

Florist Bow collects and processes your personal data based on the following lawful bases, as permitted under GDPR:

• Contractual Necessity: We use your information to fulfil our contract with you, such as completing your floral order, processing payments, and ensuring efficient delivery.
• Legitimate Interests: In certain circumstances, we process information to pursue legitimate business interests, such as customer service, record maintenance, and direct marketing (where not overridden by your rights).
• Legal Obligations: We may use or disclose your data to comply with laws, regulatory requirements, or to respond to lawful requests by public authorities.
• Consent: Where required by law, such as for certain marketing communications, we will seek your explicit consent. You can withdraw consent at any time.

How We Use Your Data

Florist Bow uses your personal data exclusively for activities necessary to provide and improve our products and services. Examples include:

• Processing and delivering your orders
• Communicating with you regarding your purchase
• Providing customer support or responding to your enquiries
• Sending order confirmations, updates, and notifications related to your order
• Enhancing our website's usability and your customer experience
• Complying with legal and regulatory obligations

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by law or regulations. Generally, we keep your data for up to seven years after your last transaction to meet accounting and legal requirements. After this period, your information will be securely erased or made anonymous so that you can no longer be identified.

Sharing and Processors

We treat your personal data with the utmost confidentiality. However, to provide an efficient service, certain third-party processors may have access to your information. These may include payment service providers, IT infrastructure suppliers, delivery partners, and analytics providers. All our processors are carefully selected and are required to uphold the same technical and organisational measures to protect your data as we do.

Florist Bow does not sell or rent your personal data to any third parties. We only share your information with external organisations where required under our contract with you or where the law obliges us to do so.

International Data Transfers

Wherever possible, we aim to keep your data processing within the United Kingdom and the European Economic Area (EEA). Should processing outside these regions become necessary, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protective measures, in line with GDPR requirements.

Your Rights Under GDPR

Under GDPR and UK data protection laws, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of your personal data held by Florist Bow.
• Right to Rectification: Ask us to correct or update inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
• Right to Data Portability: You are entitled to receive your data in a structured, commonly used, and machine-readable format, and to have it transferred to another data controller upon request.
• Right to Object: Where we process data based on legitimate interests or for direct marketing, you may object to such processing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise your rights, please contact us using the details provided at the end of this policy or through our website contact form. In most cases, we will respond within one month of your request.

How We Protect Your Data

Florist Bow is committed to protecting your data through robust technical and organisational measures. These include encrypted connections for all online transactions, regular security reviews, staff training, secure data storage systems, and procedures for dealing with suspected data breaches.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory obligations. The latest version will always be available on our website. Significant changes will be communicated through appropriate channels where necessary.

Contact and Complaints

If you have questions regarding this policy or believe your data has not been handled in accordance with applicable laws, please reach out to us using the contact form on our website. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you consider our processing of your personal data to be unlawful.

Thank you for trusting Florist Bow with your personal data. We are dedicated to ensuring your privacy and delivering a secure, high-quality service to all customers in Bow and surrounding districts.