Privacy Policy – Shoreditch Florist Customers

Introduction

This Privacy Policy explains how Shoreditch Florist collects, uses, stores, and protects your personal data when you place orders with us in Shoreditch and the surrounding districts. We comply with the General Data Protection Regulation (GDPR) and are committed to safeguarding your data. This policy applies to all customers making purchases in-person, online, or by phone for deliveries or pick-up within our service area.

What Personal Data We Collect

When you order flowers from Shoreditch Florist, we may collect and process the following categories of personal information:

• Identity Data: Your full name.
• Contact Data: Delivery address, billing address, and contact details such as phone number (optional) for order confirmation and delivery, and email address if provided for receipts or updates.
• Transaction Data: Details of your purchased items, delivery details, and payment information. We do not store card details; these are processed securely by our payment processor.
• Order Details: Messages or preferences submitted with your order (like card messages or special requests).
• Marketing Preferences: Only if you opt-in to receive marketing communications.
• Technical Data: Date and time of order, device used, and, if ordering online, basic connection data such as IP address (for fraud prevention and order processing).

Lawful Basis for Processing Your Data

Shoreditch Florist processes your personal data only where permitted under GDPR. The lawful bases on which we rely include:

• Contractual Necessity: We use your data to fulfil your order, deliver flowers, communicate with you about your purchase, and process payments.
• Legitimate Interests: For certain uses such as managing our business operations, improving our service, and preventing fraud. Only relevant data is used for these purposes, and your rights and interests are always considered.
• Legal Obligation: We may process data if required to comply with applicable laws (e.g., tax and accounting regulations).
• Consent: For sending you marketing communications, we will only do so if you have expressly opted-in. You can withdraw this consent at any time.

How We Use Your Data

We use your information to:

• Process, fulfil, and deliver your orders.
• Contact you about your purchase or delivery details as needed.
• Manage payments and refunds.
• Comply with legal and regulatory obligations.
• Improve our products and customer service.
• Send marketing communications if you have opted in.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements. Typically, order and transaction data are retained for up to seven years, as required by law. Any data used for marketing will be kept until you withdraw your consent or unsubscribe.

Sharing and Processing Your Data

Shoreditch Florist may only share your personal data with trusted partners and processors essential for completing and delivering your order. These include:

• Payment Processors: For handling payments securely.
• Delivery Staff or Couriers: Who need your address and recipient’s name to deliver your order.
• IT Service Providers: For managing our order processing and website infrastructure.

All third-party processors are contractually obliged to safeguard your data and process it only as instructed by us. Your data will not be sold or shared for unrelated purposes without your consent. Data is stored within the UK or EEA wherever possible. Any international data transfers are protected by strict measures to ensure your data remains secure.

Your Rights under GDPR

The GDPR gives you several important rights regarding your personal data. You have the right to:

• Access Your Data: Request a copy of the personal information we hold about you.
• Rectify: Correct inaccurate or incomplete data about you.
• Erase: Ask us to delete your personal data in certain circumstances.
• Restrict Processing: Request temporary suspension of processing your data.
• Object: Object to processing where it is based on legitimate interests or direct marketing.
• Data Portability: Obtain and reuse your personal data for your own purposes across different services.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent (e.g., marketing).

To exercise any of these rights or to make a complaint, please contact us via the contact information provided on our website or in-store documentation.

Data Security

We implement strong physical, technical, and organisational safeguards to protect your personal information from unauthorised access, disclosure, alteration, or loss. Access is limited to staff and partners who genuinely require it to fulfil your order. Regular reviews and tests are performed on our procedures and policies to ensure continued data protection.

Children’s Privacy

Our products and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we may have inadvertently collected such data, please contact us so we can remove it promptly.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our processes or legal requirements. The most recent version will always be available on our website and in-store. Please review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or how your data is managed, please contact Shoreditch Florist using the contact information available on our website or in-store documentation. We take your privacy seriously and are happy to respond to your enquiries or concerns.