Whitechapel Florist GDPR Privacy Policy
Introduction
This Privacy Policy describes how Whitechapel Florist ("we", "our", or "us") manages and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and related UK data protection laws. This policy applies to all customers placing orders with Whitechapel Florist in Whitechapel and surrounding districts. By ordering from us, you accept the terms set out below and consent to our processing of your personal data as outlined herein.
What Data We Collect
We collect and process the following categories of personal information when you place an order or interact with Whitechapel Florist:
- Contact details: Your name, address, delivery address (where different), and telephone number.
- Order information: Details of your order, including product selections, messages for recipients, and delivery instructions.
- Payment details: Necessary payment information to process your transaction (note: actual payment details such as full card numbers may be processed securely by payment providers and not retained by us).
- Communication: Records of your correspondence with us, including inquiries, feedback, or complaints.
- Usage data: Information about how you access and use our website, such as IP address, browser type, and browsing activities (collected via cookies and similar technologies, where applicable).
We do not intentionally collect special category data or information about children. Please avoid providing such data in communications or order messages.
Lawful Basis for Processing Your Data
Whitechapel Florist processes your data using the following lawful bases as defined by the GDPR:
- Contractual necessity: We process your personal data to fulfil our contract with you when you place an order, including order confirmation, fulfilment, and delivery.
- Legitimate interests: We may process your information to improve our customer service, communications, or website functionality, provided our interests are not overridden by your rights and freedoms.
- Legal obligations: Some data may be processed and retained to comply with legal, tax, or regulatory requirements.
- Consent: In certain circumstances, such as for sending marketing materials, we will ask for your consent before processing your personal data. You may withdraw your consent at any time.
How We Use Your Personal Data
We use your personal information only for the purposes for which it was collected, including:
- Processing, preparing, and delivering your orders.
- Communicating with you about your order status or any related queries or issues.
- Responding to your inquiries, feedback, or complaints.
- Complying with legal and regulatory obligations.
- Improving our services and business processes.
Retention of Your Data
Whitechapel Florist retains your personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by law. The retention period depends on the type of information and the reason for processing it. Typical retention schedules are as follows:
- Order and contact details are retained for up to seven years to comply with tax, accounting, and legal requirements.
- Customer queries and correspondence may be retained for up to three years after resolution.
- Usage data collected via cookies may be deleted or anonymised after six months, unless further retention is necessary for security or operational reasons.
Processors and Sharing of Data
Your personal data may be processed by trusted third-party service providers ("processors") who assist Whitechapel Florist with specific functions. Examples include payment processing, website hosting, technical support, and delivery partners to fulfil your order. All processors are contractually required to handle your data securely and only in accordance with our instructions and this Privacy Policy.
We do not sell your data or share it outside of Whitechapel Florist and its processing partners, except when required by law or regulation.
Your Rights Under GDPR
As a customer, you have rights under the GDPR regarding your personal data. These include:
- Right to access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You can request correction of inaccurate or incomplete personal data.
- Right to erasure: In specific situations, you may request that your data be deleted ("the right to be forgotten") where no legal basis for retention exists.
- Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
- Right to object: You have the right to object to processing based on our legitimate interests or for direct marketing purposes.
- Right to data portability: Where applicable, you may request to receive your personal data in a structured, commonly used, machine-readable format, or have it transmitted to another controller.
- Right to withdraw consent: If you have given consent for a particular use of your data, you can withdraw it at any time. This will not affect the lawfulness of any processing based on consent before its withdrawal.
To exercise your rights, please contact us using the contact methods provided on our website. We may need to verify your identity before responding and will handle all requests in accordance with applicable data protection law.
Data Security
We are committed to protecting your personal information. Whitechapel Florist employs appropriate technical and organisational measures to safeguard your data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Our processing partners are also contractually required to implement equivalent data security standards.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our data processing, legal obligations, or customer feedback. The current version will always be available on our website. Where appropriate, we will notify you of significant changes to this policy prior to their implementation.
Contact and Complaints
If you have any questions or concerns about how Whitechapel Florist processes your data, or if you wish to exercise your data protection rights, please refer to the contact details provided on our website. Should you feel that your concerns have not been appropriately addressed, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.
Thank you for trusting Whitechapel Florist. Your privacy and data security are of the utmost importance to us.
