GDPR-Compliant Privacy Policy for Rush Green Florist

Introduction

This Privacy Policy explains how Rush Green Florist collects, uses, stores, and protects your personal information, in accordance with the General Data Protection Regulation (GDPR). This Policy applies to all customers placing orders with Rush Green Florist, whether located in Rush Green or the surrounding districts. We are committed to respecting your privacy and keeping your data secure.

What Data We Collect

When you place an order with Rush Green Florist, we collect specific personal data necessary to process your purchase and fulfil your requirements. The types of data we may collect include:

• Name: For order identification and communication purposes.
• Address: For delivery of goods and invoicing.
• Contact Details: Such as phone number (optional) and email address, used for communication about your order, delivery, or occasional customer service follow-ups.
• Payment Information: Card or payment details are processed securely via authorised payment processors. Rush Green Florist does not retain financial data after the transaction completes.
• Order Details: Including product selections, messages or instructions, and delivery dates.
• Technical Data: Such as IP address and browser type, when you visit our website, for security and analytical purposes.

Lawful Basis for Processing Your Data

Our legal bases for collecting and processing your personal information include:

• Contractual Necessity: Most information is processed in order to fulfil our contract when you place an order with us (e.g., shipping flowers to an address you provide).
• Legal Obligation: We may process your information to comply with legal or regulatory requirements, such as retaining orders for accounting or tax records.
• Legitimate Interests: In rare circumstances, we may use your data to communicate service improvements, gather feedback, or develop our products, always balancing your rights and interests.
• Consent: If we ever wish to use your details for marketing or promotions, we will request your explicit consent. You have the right to withdraw consent at any time.

How We Use Your Data

Your information is used for the following purposes:

• To process and deliver your orders efficiently.
• To communicate with you about your order status, delivery details, and customer service queries.
• To comply with any applicable laws and regulations.
• To improve our products, services, and website user experience.

Data Retention

Rush Green Florist retains your personal data only as long as necessary to fulfil the purpose for which it was collected, to satisfy any legal, accounting, or reporting obligations, or as required for dispute resolution or contract enforcement. Generally, most customer account and order records are retained for up to seven years in accordance with legal requirements for business and tax records. After this period, your data is securely deleted or anonymised.

Third-Party Data Processors

We sometimes employ third-party companies, such as payment processors and delivery partners, who act as data processors on our behalf. These partners are required to adhere strictly to GDPR requirements, use your information only for providing contracted services, and maintain appropriate security safeguards. We do not sell or share your data with unrelated third parties for marketing purposes.

Your Data Protection Rights

As a customer of Rush Green Florist, you have the following rights under GDPR:

• Right of Access: You can request copies of your personal data held by us.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: Also known as the ‘right to be forgotten’, you can request the deletion of your data if it is no longer necessary for the purposes collected.
• Right to Restriction: You can ask us to restrict processing in certain circumstances.
• Right to Object: You can object to processing of your data on grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your data in a commonly-used, machine-readable format if you wish to transfer it to another provider.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw this at any time.

To exercise any of these rights, please contact us using our standard communication channels. We aim to respond to all legitimate requests within one month. For complex requests, this period may be extended and you will be notified accordingly.

How We Protect Your Data

Your data security is important to us. We implement technical and organisational safeguards to protect your information, including secure servers, encrypted payment processing, and restricted access to customer data. Rush Green Florist regularly reviews its security practices to keep your information safe.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or the services we offer. The latest version will be made available on our website and will always state the effective date.

Contact and Complaints

If you have any questions about this Policy, the way Rush Green Florist handles your data, or if you wish to make a complaint, please reach out via our usual contact methods. If you remain dissatisfied, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

This Privacy Policy applies to all customers placing orders with Rush Green Florist in Rush Green and surrounding districts.