Uxbridge Florist Privacy Policy

Privacy Overview

This Privacy Policy explains how Uxbridge Florist collects, uses, stores, and shares your personal information when you place an order with us, whether online, over the phone, or in-store. It applies to all customers placing orders for Uxbridge and surrounding districts. We recognise the importance of securing your data and ensuring transparency with our data practices in compliance with the General Data Protection Regulation (GDPR).

What Personal Data We Collect

In order to process your order and provide our services, we may collect, use, store, and transfer the following categories of personal information:

• Identity Data: Your name, and, if ordering on behalf of someone, the recipient’s name.
• Contact Data: Contact details such as address (delivery and billing), phone number, and, where applicable, email address.
• Transaction Data: Order history, payment details (method, but no card numbers are stored), and purchase amounts.
• Delivery Data: Preferences, delivery instructions, and any special notes related to your order.
• Technical Data: IP address, browser type, version, and information collected via cookies if you use our website.

We only collect information that is necessary to fulfil our obligations to you and to provide the best possible service.

Lawful Bases for Processing

Under GDPR, we are required to have a lawful basis for processing your personal information. Uxbridge Florist primarily relies on the following bases:

• Contractual Necessity: Processing is necessary for the performance of a contract with you (such as your order), or to take steps at your request before entering into a contract.
• Legal Obligation: We may process your data in order to comply with the law (such as retaining transaction records for accounting and tax purposes).
• Legitimate Interests: In some cases, we may process your data for our legitimate business interests, provided those interests do not override your rights and freedoms. For example, for internal record-keeping or to improve our services.
• Consent: Where we rely on consent (such as for direct marketing), you have the right to withdraw it at any time.

How We Use Your Personal Data

Your data is used for the following purposes:

• Processing and fulfilling your orders
• Arranging delivery and communicating order status
• Internal record keeping, including accounting and tax compliance
• Responding to your queries and requests
• If agreed, sending information about special offers, new products, or seasonal promotions
• Improving our website and services, including troubleshooting and analytics

Data Retention

Your personal data is only retained for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order information is kept for a minimum of six years to comply with tax and accounting laws. After this period, data will be securely deleted or anonymised.

Data Processors and Sharing

Uxbridge Florist uses trusted third-party service providers ('processors') to assist with business functions such as payment processing, delivery, and IT hosting. These processors act only on our instructions and are obligated to comply with applicable data protection laws and confidentiality.

We may also share personal data with regulatory authorities if required by law. Uxbridge Florist does not transfer your data outside the UK or European Economic Area unless strictly necessary and only with appropriate safeguards.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the information we hold about you.
• Right to Rectification: You can request correction of any incomplete or inaccurate data we hold about you.
• Right to Erasure: You can ask us to delete or remove your data in certain circumstances, such as when there is no good reason for us to continue processing it.
• Right to Restrict Processing: You may ask us to suspend the processing of your data under certain conditions.
• Right to Data Portability: You can ask to transfer your data to a third party where applicable.
• Right to Object: You have the right to object to processing where we are relying on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on consent for processing, you may withdraw this at any time.

We will endeavour to respond to data rights requests within one month. You will not be charged for these requests unless the request is manifestly unfounded or excessive.

Security of Your Data

Uxbridge Florist implements appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. This includes limited access controls, up-to-date IT security, and secure physical storage where required.

Policy Updates

This privacy policy may be amended from time to time to reflect changes in regulations or our business practices. The most current version will always be available to customers when using Uxbridge Florist services in Uxbridge and surrounding districts.

Contact and Concerns

If you have any questions or concerns about this policy or how your personal information is handled, you can contact us through our customer support channels or in-store. Additionally, you have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.