Cranford Florist Privacy Policy

Introduction

This Privacy Policy outlines how Cranford Florist collects, uses, stores, and protects your personal data when you place orders with us. This policy applies to all customers placing Cranford Florist orders for delivery within Cranford and surrounding districts. Our commitment is to respect your privacy, protect your data, and comply with the General Data Protection Regulation (GDPR).

What Data We Collect

When you order from Cranford Florist, we collect and process personal data necessary for fulfilling your order. The information we may collect includes:

  • Identification Data: Full name, delivery address, and contact details (such as phone number if provided).
  • Transaction Data: Order details, payment method (processed through a secure third-party platform), and purchase history.
  • Correspondence: Any messages, instructions, or additional information you provide for the purposes of completing your order or handling your enquiries.
  • Website Usage Data: Information about how you use our website, such as pages visited and order baskets (collected via cookies with your consent).

Lawful Basis for Processing Personal Data

Cranford Florist processes your personal data under the following legal bases as required by GDPR:

  • Contractual Necessity: Most data we collect is necessary for fulfilling your order and providing the services you request.
  • Legal Obligation: We may process some basic data to comply with legal and regulatory requirements, such as record keeping for tax purposes.
  • Legitimate Interests: We may process your data for legitimate business interests, such as improving our services, handling complaints, or fraud prevention, provided that such interests are not overridden by your rights and freedoms.
  • Consent: For optional communications, marketing, or analytics based on cookies, we seek explicit consent which you may withdraw at any time.

Data Retention

Your personal data will be kept only for as long as necessary to fulfill the purposes for which it was collected, including meeting any legal, accounting, or reporting requirements. Details are as follows:

  • Order and transaction records are typically retained for up to 6 years from the completion of your order to comply with legal obligations.
  • Personal contact data used for marketing purposes is retained only as long as consent remains in place, or until you opt out.
  • Website usage data collected via cookies is retained in line with our cookie policy and only as long as required for analytical or performance purposes.

Processors and Third Parties

We do not sell your data. However, Cranford Florist may share your data with third-party service providers who act as data processors strictly for the purposes outlined below:

  • Payment Processors: Secure third-party payment platforms process your payment details on our behalf. We do not store your full payment card information.
  • Delivery Services: When necessary, we may share delivery details with trusted couriers for order fulfillment.
  • IT Support and Maintenance: Service providers helping us operate or troubleshoot our website or systems may inadvertently access some data under strict confidentiality agreements.

All processors are engaged under contractual agreements that require them to protect your data and use it only for specified purposes. Your data will not be transferred outside the European Economic Area unless adequate safeguards are in place.

Your Rights Under GDPR

As a Cranford Florist customer, you have the following rights in relation to your personal data:

  • Right to Access: Request a copy of personal data we hold about you, free of charge in most cases.
  • Right to Rectification: Request corrections of any inaccurate or incomplete personal information.
  • Right to Erasure: Ask for your personal data to be deleted when it is no longer needed or if processing is unlawful, subject to legal retention requirements.
  • Right to Restrict Processing: Request a pause or restriction on processing under certain circumstances.
  • Right to Object: Object to the processing of your data for marketing or where we process data based on legitimate interests.
  • Right to Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format and have it transferred to another controller where technically feasible.
  • Right to Withdraw Consent: If we rely on your consent for any processing, you have the right to withdraw it at any time. Withdrawing consent does not affect any processing carried out before your withdrawal.
  • Right to Lodge a Complaint: If you believe your data protection rights have been breached, you are entitled to lodge a complaint with a supervisory authority.

Security Measures

Cranford Florist is committed to ensuring your data is secure. We implement appropriate technical and organisational measures to protect your data against unauthorized access, loss, or misuse. This includes restricted access to data, secure storage, and staff training in data protection procedures.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in data protection practices, legal requirements, or our services. We encourage you to review this policy periodically to stay informed about how we protect your privacy. The latest version will always be available upon request in-store or via our website.

Contact and Concerns

If you have any questions, concerns, or wishes to exercise your data protection rights regarding your personal data held by Cranford Florist, please contact us using the details provided in-store or on our website. We are dedicated to addressing your privacy-related queries in a timely and transparent manner.