Barking Florist Privacy Policy

Introduction

This Privacy Policy describes how Barking Florist collects, uses, stores, and protects your personal data when you place orders with us. This policy applies to all customers who order from Barking Florist within Barking and surrounding districts. We adhere to the UK General Data Protection Regulation (GDPR) to safeguard your data and your privacy rights.

What Data We Collect

When you interact with Barking Florist or place an order, we may collect the following types of personal data:

• Contact Information: Your name, delivery address, billing address, and contact telephone number.
• Order Information: Details of your purchases, delivery preferences, and messages accompanying orders.
• Payment Information: Information related to your payment method (e.g., last four digits of credit card). Please note, we do not store full card numbers ourselves; third-party payment processors handle payment data securely.
• Communication Data: Records of any communications you send to us, such as emails or written correspondence.

Lawful Basis for Processing Your Data

Barking Florist processes your personal data based on the lawful bases provided by the GDPR:

• Contract: We need certain information to process and deliver your order, and to communicate with you regarding your purchase.
• Legal Obligation: We may be required to retain certain data for tax, accounting, or regulatory compliance.
• Legitimate Interests: We may process your data to improve our services, manage our records, prevent fraud, and for business analysis, provided your interests and fundamental rights do not override ours.
• Consent: Where applicable, we obtain your consent for specific uses, such as marketing communications. You can withdraw consent at any time.

How We Use Your Data

Your data is used by Barking Florist to:

• Process and deliver your floral orders efficiently and accurately.
• Communicate with you about your order status, delivery, or any issues.
• Improve our products and services based on customer feedback and purchasing trends.
• Comply with our legal and accounting obligations.
• Respond to your inquiries or requests for support.

Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Order and transaction information is retained for a period required by law, typically up to six years for tax and accounting requirements.
• Contact and delivery details related to completed orders may be kept for up to two years to facilitate potential re-orders and customer service inquiries, unless you request deletion sooner.
• Where data is no longer required, it is deleted or anonymized in our records.

Data Processors and Transfers

Barking Florist works with trusted third-party service providers (processors) who assist us with payment processing, order management, and delivery logistics. These processors act only under our instruction, and we ensure they comply with GDPR requirements through appropriate agreements and technical measures.

Personal data may be processed within the United Kingdom or European Economic Area (EEA). If we ever need to transfer your data outside these regions, we will do so only in accordance with applicable data protection laws and agreements, ensuring suitable safeguards are in place.

User Rights Under GDPR

You have several rights regarding your personal data, outlined below:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you may ask for it to be corrected.
• Right to Erasure: You can request deletion of your data where it is no longer needed or where we have no lawful basis to retain it.
• Right to Restriction: In certain circumstances, you may request us to restrict processing your data.
• Right to Data Portability: You can request a digital copy of your data in a commonly used format, for use with another provider.
• Right to Object: You have the right to object to our processing of your data, including for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time. This does not affect processing carried out before your withdrawal.

Keeping Your Data Secure

We implement technical and organizational measures to ensure your personal data is protected against unauthorized access, loss, or misuse. These measures include access controls, data encryption where appropriate, and regular review of our data handling practices. Only authorized staff and service providers have access to your information as required to perform their duties.

Policy Updates

We periodically review and update this Privacy Policy to reflect changes in regulation, technology, or our business operations. The most current version will always reflect our current data handling practices. If we implement significant changes, we will endeavor to notify customers as appropriate.

Contact and Complaints

If you have questions about this Privacy Policy, the processing of your personal data, or wish to exercise your rights, please contact us using the contact information provided on our website or in your order confirmation.

If you are dissatisfied with our response to your data protection inquiry, you have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom.

Scope of This Policy

This Privacy Policy applies to all customers placing orders with Barking Florist from Barking and the surrounding districts. By placing an order or interacting with us, you acknowledge and accept the terms outlined above.