Privacy Policy for Isle of Dogs Florist Customers

Introduction

At Isle of Dogs Florist, protecting your personal information and maintaining your privacy is of utmost importance to us. This Privacy Policy explains how we collect, use, retain, and share your personal data when you place orders with us. It also sets out your rights under the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Isle of Dogs Florist from the Isle of Dogs and surrounding districts.

What Data We Collect

When you order from Isle of Dogs Florist, we collect the minimum information necessary to process your order and provide you with a personal and efficient service. The types of data we may collect include:

• Personal Identification Data: Your name and, if delivering to another recipient, their name.
• Contact Information: Your address, email address, and phone number (where provided).
• Order Details: Product selections, special delivery instructions, and gift messages.
• Payment Data: Payment method and details processed via secure payment processors. We do not store your full payment card details.
• Correspondence: Any emails, messages, or notes exchanged in the process of fulfilling your order or responding to your enquiries.
• Technical Information: Limited technical data (such as IP address, browser type, or device details) collected via our website to ensure proper functionality and security.

Lawful Basis for Processing Personal Data

Under GDPR, we must have a lawful basis to collect and use your personal information. The lawful basis we rely on depends on the circumstances:

• Contractual Necessity: Most of the information we process is necessary to perform the contract with you. This means we need your data to process your order, deliver your purchase, and communicate with you about your order.
• Legitimate Interests: Some processing, such as keeping records to improve our service, or contacting you to resolve issues with your order, is based on our legitimate interests as a business, provided your privacy rights are not overridden.
• Legal Obligations: Certain data may be retained or processed in order to comply with applicable laws, such as financial and tax regulations.
• Consent: Where required, such as for sending marketing materials, we will explicitly seek your consent. You have the right to withdraw your consent at any time.

How We Use Your Data

Your personal data will only be used for the purposes for which it was collected. Primarily, we use your data to:

• Handle and fulfil your order, including communications regarding order status or delivery.
• Process payments securely through approved payment systems.
• Respond to your queries or requests for information.
• Improve our products and customer service based on anonymized customer feedback and statistical information.
• Comply with legal requirements or resolve disputes.

Data Retention

Isle of Dogs Florist only retains your personal information for as long as necessary to meet the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. In general, we keep order records and related correspondence for up to six years to comply with legal obligations. Your data will be securely deleted or anonymized once it is no longer required.

Data Processors and Sharing Your Information

We take care to safeguard your information. However, we may share your data with trusted third-party service providers who help us fulfill your order and manage our business. These may include:

• Payment Processors: Secure payment platforms that handle card payments on our behalf. We do not have access to, or store, your full payment details.
• IT and Hosting Providers: Companies that provide hosting services and technical support for our website.
• Delivery Partners: Couriers and delivery services to complete the delivery of your flowers and gifts as requested.

Each processor is carefully vetted and is contractually obliged to protect your personal information and use it only as instructed by us. We do not sell or rent your personal data to third parties. We will only disclose your information if required by law.

Your Rights Under GDPR

As a customer of Isle of Dogs Florist, you have the following rights regarding your personal data under the GDPR:

• Right to Access: You may request details of personal information we hold about you.
• Right to Rectification: You have a right to request correction of inaccurate or incomplete data.
• Right to Erasure: You can ask for your personal data to be deleted, provided there is no legal reason for us to retain it.
• Right to Restrict Processing: Request limitation of how your data is processed in certain circumstances.
• Right to Data Portability: Where applicable, request a copy of your data in a commonly used format for transfer to another service provider.
• Right to Object: You may object to the processing of your data in certain situations, such as for direct marketing.
• Right to Withdraw Consent: If we rely on your consent to process your data, you can withdraw this consent at any time.

To exercise any of your rights, please contact us directly. We will respond to all requests in accordance with applicable data protection laws.

Data Security

We maintain robust security measures to help prevent unauthorised access, data alteration, disclosure, or destruction of your personal data. These include using secure servers, encrypted communication, and regular reviews of our data processing activities and security procedures. While we take all reasonable steps to protect your data, no internet-based service is entirely risk-free; therefore, we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updates will be published on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact and Complaints

If you have any questions, concerns, or requests about this Privacy Policy or our handling of your personal data, please get in touch with us. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.