Richmond Florist Privacy Policy

Name: SPARKLING EYES
Brand: Richmond Florist
Price: 50.00 GBP
Availability: InStock

Introduction

This Privacy Policy outlines how Richmond Florist collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). If you are a customer placing an order with Richmond Florist in Richmond or the surrounding districts, this policy applies to you. We recognise your right to privacy and are dedicated to maintaining the security and integrity of your personal information.

What Data We Collect

Richmond Florist may collect and process the following categories of personal data when you place an order:

Identification Data: Name, delivery address, and billing address.
Contact Information: Telephone number, email address.
Order Details: Purchase history, order preferences, messages for recipients.
Payment Information: Transaction details (note: payment card information is processed securely by our payment providers and is not stored on our servers).
Technical Data: IP address, browser type and version, device identifiers, and usage data collected through cookies and similar technologies for website analytics and security.

Lawful Basis for Processing

We process your personal data using the following legal bases:

Contractual Necessity: To fulfil and deliver orders, process payments, and communicate with you about your purchase.
Legitimate Interests: To improve our services, prevent fraud, conduct business analytics, and ensure the security of our website.
Legal Obligations: To comply with applicable accounting, taxation, and regulatory requirements.
Consent: When required, such as for sending direct marketing communications, we will obtain your explicit consent, which you may withdraw at any time.

How Your Data Is Used

Your data is used strictly for the purposes for which it was collected, including:

Processing and fulfilling your orders.
Communicating with you regarding order status, delivery, and customer support.
Improving our products, website, and services based on user preferences and analytics.
Complying with legal and regulatory requirements.
Marketing communications (where permitted and with your consent).

Data Retention

Richmond Florist retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The general retention periods are:

Order and transaction data: Retained for up to 7 years for accounting and regulatory compliance.
Marketing preferences and communication history: Retained until you withdraw consent or unsubscribe.
Technical data (cookies and analytics): Retained for up to 2 years or as specified by our analytics tools.

Once personal data is no longer required, it is securely deleted or anonymised.

Processors and Data Sharing

To provide our services efficiently, Richmond Florist may share your personal data with carefully selected third-party processors. These may include:

Payment processors: To handle secure transactions and prevent fraud.
Delivery services and couriers: To deliver your flower orders.
IT service providers: For website hosting, maintenance, and customer support systems.
Analytics providers: To help us understand customer behaviour and improve our website.

All processors are under contractual obligations to process your data only according to our instructions, in compliance with GDPR, and to maintain appropriate security measures. We do not sell or rent your personal data to any third parties. Where required by law, we may share your data with regulatory authorities or law enforcement agencies.

International Data Transfers

If your data is processed outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms, to guarantee your data’s protection.

Your Rights

Under the GDPR, you have specific rights regarding your personal data. These include:

Right of Access: You may request a copy of your personal data held by Richmond Florist.
Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
Right to Erasure: You may request deletion of your data where it is no longer necessary or if you withdraw consent.
Right to Restriction: Ask us to restrict or suppress the processing of your personal data in certain circumstances.
Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
Right to Object: Object to processing based on legitimate interests or direct marketing at any time.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority.

To exercise any of these rights, you may reach out to us through the contact methods listed on our website. We may need to verify your identity before fulfilling your request.

Security Measures

Richmond Florist implements technical and organisational measures to secure your personal data and protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, staff training, use of secure hosting environments, and regular review of our security procedures.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal or regulatory changes, improvements in our data handling practices, or amendments in our services. Updated policies will be published on our website with the date of the last revision.

Contact and Further Information

If you have questions about this Privacy Policy or how we handle your personal data, please contact us using the details provided on our website. We are committed to responding to all privacy-related inquiries in a timely and transparent manner.