Your Privacy Rights at Tooting Florist

Introduction to Our Privacy Policy

This Privacy Policy explains how Tooting Florist collects, uses, and protects your personal data when you place orders with us in Tooting or its surrounding districts. We are fully committed to complying with the General Data Protection Regulation (GDPR) and any applicable UK data protection laws. By purchasing from Tooting Florist, you consent to the practices described in this policy.

Who This Policy Applies To

This policy applies to all customers placing orders with Tooting Florist from Tooting and neighbouring areas. Whether you are ordering for yourself or on behalf of someone else, this document outlines how your personal data is processed, stored, and protected.

What Personal Data We Collect

When you place an order, contact us with an enquiry, or use our services, we may collect the following types of personal data:

• Identity Data: Name, title, and in certain cases, the recipient’s name if an order is sent to another person.
• Contact Data: Address, delivery information, phone number, and other contact details supplied by you when placing an order.
• Transaction Data: Order history, invoice details, payment status (we do not store full payment card details, but our payment processor may retain limited necessary information for transaction verification).
• Communication Data: Records of correspondence, order instructions, special requests, and feedback.
• Technical Data: Where relevant, information such as IP address, browser type, or usage data collected via our website for functional and analytical purposes.

Lawful Basis for Processing

Tooting Florist processes personal data under the following lawful bases:

• Contractual Necessity: Most of our processing is necessary to fulfill our contract with you, such as taking your order, delivering flowers, or providing customer support.
• Legal Obligation: We may need to retain data for tax, accounting, or other legal requirements.
• Legitimate Interests: On occasion, we process data to improve our services, manage our relationship, or for business administration, provided your fundamental rights do not override these interests.
• Consent: For marketing communications or where required by law, we will seek your explicit consent.

How We Use Your Personal Data

We use personal data only for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible reason. These purposes include:

• Processing your order and providing customer service.
• Delivering products to the requested address.
• Fulfilling our legal and regulatory obligations.
• Managing business operations, including accounting and administration.
• Conducting customer satisfaction surveys or requesting feedback (with your consent where required).

Who Has Access to Your Data: Processors and Third Parties

Tootig Florist does not sell your personal information to anyone. Some data may be shared with trusted third parties who act as ‘processors’ on our behalf, including:

• Payment Providers: To securely process financial transactions.
• Delivery Partners: To deliver your orders promptly and accurately.
• IT, Software & Cloud Providers: For secure data storage, website hosting, and maintenance.
• Professional Advisors: Such as accountants and legal advisors for business compliance.

All such processors act on our instructions and are contractually bound to keep your data secure and use it for the specified purpose only.

International Data Transfers

Generally, we store and process your data within the UK. Should data be transferred outside the UK or EEA (for example, if a cloud provider stores data internationally), we take steps to ensure an adequate level of protection, such as relying on Standard Contractual Clauses approved by the European Commission or UK safeguards.

Data Retention: How Long We Keep Your Information

Tooting Florist retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, we retain order and contact data for up to six years after your last order to comply with statutory obligations. Data used only for marketing purposes is retained until you withdraw your consent or request removal.

How We Protect Your Data

We have implemented appropriate technical and organisational security measures to safeguard your information, including secure storage, data encryption, and restricted access. Only personnel who need access for legitimate business purposes can view your data.

Your Rights Under GDPR

As a data subject in the UK or EEA, you have the following rights:

• Right to Access: You can request confirmation of what data we hold about you and receive a copy.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can ask us to delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request we restrict the use of your data if you contest its accuracy or have objected to processing.
• Right to Data Portability: You may request your data in a structured, commonly used format.
• Right to Object: You can object to processing carried out on legitimate interests or direct marketing grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing), you may withdraw this at any time.

If you wish to exercise any of your rights, please contact us. Identification may be required to safeguard your data privacy. If your rights requests cannot be satisfied, you have the right to lodge a complaint with the applicable supervisory authority.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be made available through our website or in-store. Material changes will be communicated as appropriate.

Contact and Further Information

For more details on this policy, data protection matters, or to exercise your rights, please reach out to us at Tooting Florist in person or via our official communication channels. We are committed to resolving concerns and ensuring your privacy is respected at all times.