Florist Soho: Privacy Commitment for Customers

Privacy Policy for Florist Soho Customers

Florist Soho is committed to upholding your privacy and complying with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your data when you place orders with Florist Soho from Soho and the surrounding districts. It also explains your legal rights and our obligations as a data controller.

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Florist Soho, whether online, in person, or via telephone, within Soho and nearby areas. By placing an order with us, you acknowledge and agree to the practices outlined in this Policy.

Information We Collect

We collect and process the following types of personal data as part of providing our products and services:

• Identification Data: Name, surname.
• Contact Details: Delivery address, billing address, phone number, and (where applicable) email address.
• Order Information: Details of floral arrangements ordered, order notes, delivery instructions, order history, and transaction data (excluding full payment card details).
• Payment Information: Partial information necessary for processing the transaction (e.g., the last 4 digits of your credit or debit card, payment method choice). Full payment card details are processed directly by our trusted payment processors and not stored by Florist Soho.
• Marketing Preferences: Information about your consent to receive marketing messages or newsletters.
• Technical Data: IP address, device details, browser type, and access times if you visit our website or mobile platform.

Lawful Basis for Processing

We process your data under one or more of the following lawful bases, in compliance with GDPR:

• Performance of a Contract: Processing data is necessary to fulfil your flower order, arrange delivery, manage payments, and provide customer service.
• Legal Obligation: We may process certain data to comply with applicable legal requirements (e.g., accounting, tax records).
• Legitimate Interests: We may use data for purposes such as improving our products and services, fraud prevention, and communication regarding your order, provided these are not outweighed by your data protection rights.
• Consent: Where required, such as for marketing communications, we will process your data only after obtaining your explicit consent, which you can withdraw at any time.

Data Retention

We only hold your personal information for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. Typically:

• Order and Transaction Data: Retained for up to seven years to satisfy legal and regulatory requirements.
• Marketing Preferences: Retained until you withdraw your consent or update your preferences.
• Technical Data: Retained for up to two years for analytics and system security purposes.
• We routinely review the personal data we hold and securely delete any information that is no longer necessary.

How We Use Your Data

Your personal data is used strictly for the following purposes:

• Processing and delivering your orders.
• Managing payments and refunds.
• Providing customer service and order updates.
• Sending communications related to your order.
• Improving our services and customer experience.
• Fulfilling legal and regulatory obligations.
• With your consent, sending marketing communications.

Data Sharing and Processors

To fulfil your order and support our business operations, we may share your data with trusted third-party service providers ("processors"), who process data on our behalf. These include:

• Payment processors: Handle secure card transactions and payment authentication.
• Delivery partners: Carry out delivery of floral orders and manage logistics.
• IT service providers: Support our website infrastructure, databases, and secure cloud storage.
• Marketing platforms: Manage newsletters or promotional messages (only where you have provided consent).

All third-party processors are contractually required to protect your data in accordance with applicable laws and are not permitted to use your data for their own purposes.

International Data Transfers

In certain cases, your data may be processed or stored outside the United Kingdom or the European Economic Area. When this occurs, we ensure adequate safeguards are in place, such as contractual clauses, to protect your data to GDPR standards.

Security of Your Data

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, destruction, or damage. Access to personal data is limited to personnel and third parties who need it to fulfil their duties.

Your Rights as a Data Subject

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of your personal data held by us.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you can request your personal data is deleted.
• Right to Restrict Processing: You can ask us to restrict the use of your data in specific situations.
• Right to Data Portability: You can request your data in a structured, commonly used format for transmission to another controller, where applicable.
• Right to Object: You have the right to object to the processing of your data based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent (e.g., for marketing), you may withdraw your consent at any time.
• Right to Lodge a Complaint: You may lodge a complaint with a supervisory authority should you believe your data protection rights have been violated.

Updates to This Privacy Policy

We regularly review and update this Privacy Policy to reflect changes in our data practices and legal obligations. Customers are encouraged to check this Policy periodically to remain informed about how we protect your personal data.

Contacting Florist Soho

If you have any questions or concerns about this Privacy Policy or the ways in which Florist Soho handles your personal data, please get in touch with us via our website's contact form, by post at our main location, or in person in our shop. We are happy to address any queries about your data protection rights.

Thank you for trusting Florist Soho with your information.