Isleworth Florist Privacy Policy

Introduction

This Privacy Policy explains how Isleworth Florist (“we”, “us”, “our”) collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (GDPR). It applies to all customers placing orders with Isleworth Florist from Isleworth and surrounding districts, both online and through other ordering channels. By placing an order, you acknowledge that you have read and understood this policy.

What Personal Data Do We Collect?

Isleworth Florist only collects the information necessary to process your orders, fulfil contractual obligations, respond to enquiries, and improve our services. The types of personal data we may collect include:

• Contact Information: Name, delivery address, billing address, and phone number.
• Order Details: Product selections, delivery notes, gift messages, and order history.
• Payment Information: Payment card details (processed securely via third-party payment processors; we do not store full card numbers).
• Account Details: If you register an account, username and password.
• Communication Data: Correspondence via phone or written messages related to your order or customer service enquiries.
• Website Usage Data: IP address, browser type, operating system, and usage statistics collected via cookies when you visit our website.

Lawful Basis for Data Processing

We process your personal data on the following lawful grounds under the GDPR:

• Contractual Necessity: When processing is required to fulfil orders, provide requested floral services, or perform obligations from any other contracts entered into with you.
• Legal Obligation: For compliance with accounting, tax, or other legal requirements.
• Legitimate Interests: To improve our services, prevent fraud, and manage business operations, provided such interests are not overridden by your rights.
• Consent: Where you have explicitly provided your consent, such as for receiving marketing communications (which may be withdrawn at any time).

How We Use Your Data

Your data is used only for purposes necessary to deliver and improve our services:

• Processing and delivering your floral orders.
• Maintaining business records and complying with legal requirements.
• Responding to your enquiries and requests.
• Analysing website usage and improving user experience.
• If opted-in, sending information about products, promotions, or service updates (you can opt out at any time).

Data Retention

We retain your data only for as long as necessary to:

• Fulfil the purposes set out in this policy.
• Comply with legal obligations (such as tax and accounting records).
• Establish, exercise, or defend legal claims.

Typically, order records are retained for up to seven years to satisfy statutory accounting requirements. After this period, your data is securely deleted or anonymised so that it can no longer be linked to you.

Data Processors and Sharing

Your personal data is shared only when necessary and with trusted third parties who help us deliver our services. These service providers act as data processors on our behalf and must comply with GDPR requirements, including security standards:

• Payment Processors: For securely processing your payment transactions.
• Delivery Partners: To fulfil order deliveries within Isleworth and surrounding districts.
• IT and Website Providers: For website hosting, data storage, and email communication management.

We do not sell your personal data. When sharing data with processors or required authorities, we take all reasonable steps to ensure that your data is treated securely and in accordance with this policy.

Your Rights Under GDPR

As a data subject, you have rights regarding your personal information, including:

• Right of Access: To request a copy of your personal data that we hold.
• Right to Rectification: To request correction of inaccurate or incomplete information.
• Right to Erasure: To request deletion of your data where there is no legal reason for continued processing.
• Right to Restriction: To request we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: To request your data is provided in a structured, commonly used format for transfer to another service provider.
• Right to Object: To object to us processing your data for legitimate interests, or for direct marketing purposes.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the contact options provided on our website or in-store. We will respond to your request within one month and will require verification of your identity for any significant changes or data access.

Data Security

Isleworth Florist takes data security seriously and adopts appropriate physical, technical, and organisational measures to protect your information from accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures include secure servers, encryption of financial transactions, regular system updates, and restricted access by staff trained in data protection principles.

Cookies and Website Analytics

Our website uses cookies and analytical tools to enhance your experience and to collect statistical data about visits and usage. These cookies do not collect personally identifiable information unless you explicitly supply it. You may set your browser to refuse cookies, although some website features may not function properly without them.

Policy Scope and Updates

This policy applies to all customers who place orders with Isleworth Florist from Isleworth and the surrounding districts. We may update this Privacy Policy periodically to reflect changes in legal obligations or our data processing activities. Updates will be posted on our website, and, where appropriate, changes will be communicated directly to customers.

Contact and Complaints

If you have any questions, queries, or concerns about how your data is processed or wish to make a complaint, please contact us using the details available on our website or in-store. If you are not satisfied with our response, you have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s Data Protection Authority.

Thank you for trusting Isleworth Florist with your personal data. We are committed to safeguarding your privacy and handling your information transparently and responsibly.