Privacy Policy for Shacklewell Florist

Introduction

At Shacklewell Florist, we take the privacy and security of your personal data seriously. This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR). It applies to all individuals placing flower orders with Shacklewell Florist from Shacklewell and the surrounding districts. By using our services, you acknowledge and agree to the data practices described in this policy.

What Data We Collect

When you interact with Shacklewell Florist, we collect and process personal data necessary for fulfilling your order and enhancing your experience. The types of data we collect include:

• Identity Data: Name, title, and contact details (such as delivery address and postcode)
• Contact Data: Phone number, email address (if provided), and any communication preferences
• Order Data: Purchase details, delivery instructions, and messages for recipients
• Payment Data: Details regarding the payment method, transaction ID (we do not store card numbers or security codes)
• Technical Data: IP address, browser type and version, time zone setting, device type, and browsing activity on our website

We do not intentionally collect special category data (such as health or ethnicity), children's data, or sensitive information unless required for delivery accommodations and only with your explicit consent.

Lawful Basis for Processing

Shacklewell Florist processes your personal data based on the following lawful bases as defined under GDPR:

• Contractual Necessity: Most of the information we collect is required to process and deliver your flower order. This includes personal and order data needed to fulfil our contract with you.
• Legal Obligation: Certain data may be retained for accounting or tax purposes, as required by law.
• Legitimate Interests: We may use your information to improve our services, provide customer support, prevent fraud, and ensure the security of our website. Such processing is balanced against your rights and freedoms.
• Consent: If you opt to receive marketing communications or share recipient information, we seek your explicit consent, which you may withhold or withdraw at any time.

How We Use Your Data

We use your data to provide you with seamless service, including processing your order, arranging deliveries, confirming transactions, and providing customer support. Your information may also be used for:

• Notifying you of service updates or order status
• Managing payments and preventing fraudulent transactions
• Gathering feedback to improve our offerings
• Marketing (with your consent only)

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods are as follows:

• Order-Related Data: Retained for up to 7 years to comply with financial regulations
• Marketing Data: Retained until you withdraw your consent or unsubscribe
• Technical Data: Retained for up to 2 years for security and analytical purposes

When data is no longer required, it is securely deleted or anonymised.

Data Processors and Third Parties

We work with trusted third-party processors who help us provide our services. These processors may include:

• Payment processing companies (for handling transactions securely)
• Delivery partners (to facilitate order delivery)
• IT service providers (for website hosting, maintenance, and analytics)

All third-party service providers are vetted to ensure GDPR compliance and are only permitted to use your data as necessary to provide their specific services to Shacklewell Florist. We do not sell or rent your personal information to third parties. If legally required, we may disclose your information to regulators, law enforcement, or other entities to protect our rights or comply with legal obligations.

Data Security

The security of your personal information is paramount. We employ appropriate organisational, technical, and physical measures to safeguard your data against unauthorised access, loss, alteration, or disclosure. Regular audits and security assessments are performed to maintain the integrity and confidentiality of our systems.

Your Rights

Under GDPR, you have several rights regarding your personal data. These include:

• Right to Access: Request access to the personal data we hold about you
• Right to Rectification: Request correction of any inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data if no longer necessary for processing
• Right to Restrict Processing: Request that we limit how your data is used
• Right to Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format
• Right to Object: Object to processing for direct marketing or legitimate interest purposes
• Right to Withdraw Consent: Withdraw consent at any time where our processing is based on it

To exercise these rights, please contact us. We may require verification of your identity prior to fulfilling your request to ensure your data security.

International Transfers

Your data is primarily processed within the United Kingdom and the European Economic Area (EEA). If transfers outside these regions are necessary (for example, where a third-party processor is located overseas), we ensure appropriate safeguards are in place to maintain your privacy rights as required by GDPR.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or service offerings. Any revisions will be posted on our website with an updated revision date. Please review this policy periodically to stay informed.

Contact and Complaints

If you have any queries about this Privacy Policy or your data rights at Shacklewell Florist, please get in touch with us through the contact methods provided on our website. If you feel your data has not been handled appropriately, you also have the right to lodge a complaint with the relevant data protection authority in the United Kingdom.