Belvedere Florist Privacy Notice

Introduction

This Privacy Notice explains how Belvedere Florist collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Belvedere Florist from Belvedere and surrounding districts. Protecting your privacy is of utmost importance to us, and we are committed to handling your personal data transparently and securely.

What Personal Data We Collect

When you place an order with Belvedere Florist, we collect a range of information relevant to processing your order and providing our services. The types of personal data we may collect include:

• Contact Details: Such as your full name, address, telephone number, and, if necessary, delivery address details.
• Order Information: Details regarding the flowers or products you purchase, delivery instructions, and messages on cards.
• Payment Information: Transaction details necessary for processing your payment. Please note that we do not store your full card or account details; only payment processors handle this securely.
• Customer Communication: Records of communications with us, including via phone, online forms, or written correspondence, for customer service and order management purposes.
• Technical Data: When visiting our website, we may collect anonymised data such as IP address and browser type for website optimisation and security, though this is not directly identifiable.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. Belvedere Florist collects and uses your data for the following lawful reasons:

• Contractual Necessity: Most of your data is processed so we can fulfil your order (e.g., process payment, deliver flowers, and communicate order status).
• Legal Obligations: Some data may be retained to comply with legal requirements, such as financial record-keeping and tax regulations.
• Legitimate Interests: We may use your data to improve our services, manage customer relations, and protect against fraud, provided such use does not override your fundamental rights.
• Consent: In some circumstances, such as marketing communications, we may seek your explicit consent which you can withdraw at any time.

How We Use Your Personal Data

Belvedere Florist uses your personal data for several purposes:

• To process and fulfil your flower and gift orders accurately and efficiently.
• To deliver products to the delivery address specified by you, including communication with delivery personnel if needed.
• To respond to your queries, provide customer support, and resolve any complaints or issues related to your order.
• To keep records for tax, financial, and legal compliance.
• With your consent, to inform you about our products, services, or special offers.
• To improve our website, products, and services through aggregated, non-identifiable data and internal analysis.

Data Retention Policy

We store your personal data only for as long as is necessary for the purposes for which it was collected or to comply with statutory obligations. Typically, order and transaction records are retained for up to six years to meet financial and legal requirements. Customer communication records are retained for up to two years unless a longer period is required to resolve ongoing issues. Once your data is no longer necessary, it will be securely deleted or anonymised.

Data Processors and Third Parties

Belvedere Florist may engage third-party processors for specific services. These may include:

• Payment processors, to securely process your online or card payments.
• Delivery companies or couriers, to ensure your order is delivered as requested.
• Professional service providers (such as IT or website support), who may access data solely to perform their contracted roles.

All third-party processors are carefully vetted, and contracts are in place to ensure that your data is handled in compliance with GDPR, only for the agreed purposes, and with robust security standards. We do not sell, trade, or rent your personal information to any other parties.

Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Access: You may request a copy of your personal information that we hold.
• Rectification: If your data is incorrect or incomplete, you have the right to ask us to correct it.
• Erasure: You can request that we delete your personal data where there is no valid reason for us to continue processing it.
• Restriction: You may request limits on how your data is processed in certain situations.
• Objection: You may object to processing, particularly where data is used for direct marketing or legitimate interest purposes.
• Portability: You can request that your personal data be transferred to another service provider, where technically feasible.
• Withdraw Consent: Where you have provided consent for a particular use of your data, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details on our website or in our store. Your request will be addressed in accordance with legal requirements, and we may need to verify your identity before processing your request.

Security Measures

We are committed to keeping your personal information secure. Appropriate technical and organisational measures are in place to protect your data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. Access to personal information is limited to authorised staff and trusted processors who are also bound by confidentiality and data security obligations.

Changes to this Privacy Notice

We may review and update this Privacy Notice to reflect changes in the law, our practices, or technology. We recommend that customers review this notice periodically to stay informed about how we protect their personal data. Significant changes will be highlighted where appropriate.

Contact and Complaints

If you have questions or concerns about how your personal data is handled by Belvedere Florist, please contact us using the contact information available on our website or in store. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in the UK.