Primrose Florist Privacy Policy
Introduction
Primrose Florist is committed to respecting and protecting the privacy of all customers placing orders with us in Primrose and the surrounding districts. This GDPR-compliant Privacy Policy explains how we collect, use, store, and protect your personal data when you place orders with Primrose Florist through any channel. Please read this policy carefully to understand your rights and our practices regarding your personal data.
Who This Policy Applies To
This policy applies to all individual customers of Primrose Florist who place orders and reside or order deliveries within Primrose and its adjacent districts. By placing an order, you agree to the terms set out in this Privacy Policy.
What Personal Data We Collect
We collect the following types of personal data from our customers:
- Identification data: Name, address, and contact details including your telephone number (if provided).
- Order details: Information about products ordered, delivery address, recipient's name (if different), and messages to be delivered with your flowers.
- Payment information: Payments for orders are processed securely. We do not store full payment card details but may retain limited transaction information for accounting and order reference purposes.
- Correspondence data: Any information you provide in communications with us, such as queries, feedback, or instructions related to your orders.
- Technical data: When you interact with our website, we may collect technical information including IP address, browser type, and interaction logs. This helps us improve our service and website functionality.
Lawful Basis for Processing Your Data
Under the UK General Data Protection Regulation (GDPR) and relevant data protection laws, we process your personal data based on the following lawful bases:
- Contractual necessity: Most of the processing we undertake is necessary to fulfill our contract with you—for example, processing your order, delivering products, and handling customer service related to your purchases.
- Legal obligation: We may need to process your data to comply with statutory or regulatory requirements, such as tax and accounting obligations.
- Legitimate interests: We may process your data to improve our services, handle feedback, or defend ourselves in case of disputes unless these interests are overridden by your data protection rights.
- Consent: Where required, such as for some marketing communications, we will only use your personal data with your explicit consent. You can withdraw your consent at any time.
How We Use Your Data
We use your data to:
- Process, fulfill, and deliver your orders and respond to your enquiries
- Communicate service updates, payment confirmations, or issues with your order
- Improve our products, services, and customer experience
- Meet our legal and regulatory obligations
- Where opted in, send you information about promotions, news, or offers (you can opt out at any time)
Sharing Your Data: Data Processors and Third Parties
We do not sell or rent your personal information. However, for the purposes listed above, we may share limited personal data with trusted third parties or data processors who perform services on our behalf. These may include:
- Delivery service providers for fulfilling orders
- Payment processing companies for secure transactions
- IT service providers who maintain our website and systems
- Accountants and regulatory bodies as required by law
All data processors act only on our instructions, are subject to data protection obligations, and cannot use your data for their own purposes.
How Long We Keep Your Data (Data Retention)
Primrose Florist only retains your personal data for as long as is necessary for the purposes described above:
- Order and service-related data: Retained for up to 6 years from the date of your last transaction, to comply with accounting, tax, and contractual obligations.
- Marketing data: Retained until you withdraw your consent or opt-out, after which it will be deleted in accordance with applicable laws.
- Technical data: Short-term retention for the purpose of website analytics and service improvement, after which it is anonymized or deleted.
When personal data is no longer needed, it is securely deleted or anonymized.
Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: The right to request a copy of the personal data we hold about you.
- Rectification: The right to request correction of any inaccurate or incomplete data.
- Erasure: The right to request deletion of your data when it is no longer needed, or you withdraw consent (where applicable).
- Restriction: The right to request we restrict how we use your data in certain circumstances.
- Data portability: The right to receive your personal data in a commonly used format or ask us to transfer it to another provider.
- Objection: The right to object to certain types of data processing, such as direct marketing.
To exercise any of these rights, or if you have any queries or concerns regarding how we use your personal data, please contact us using the contact methods provided on our website or at our premises.
Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in the law or our practices. Any material changes will be communicated through our website or other channels where appropriate.
Your Responsibilities
If you provide us with information about someone else (such as the recipient of flowers), you are responsible for ensuring that they are aware of the contents of this Privacy Policy and that they consent to you providing their data to us for the purposes stated.
Contact and Further Information
If you have questions about this Privacy Policy, your personal data, or wish to exercise your rights, you can reach us through the contact details published on our website, visit our store in Primrose, or discuss with one of our staff in person. We take your privacy seriously and will respond to your requests in accordance with applicable laws and regulations.
