Our Commitment to Customer Privacy at Motspur Park Florist

Privacy Policy for Customers of Motspur Park Florist

This Privacy Policy explains how Motspur Park Florist gathers, uses, stores, and protects the personal data of all customers placing orders with us within Motspur Park and the surrounding districts. We are dedicated to upholding the principles of the General Data Protection Regulation (GDPR) and ensuring transparency about how your personal information is handled for the purposes of delivering our floral products and services.

Scope of This Policy

This policy covers all processing of personal data by Motspur Park Florist related to customers who place or intend to place flower orders through any of our sales channels, including in-person, via telephone, or online, and who reside in or have orders delivered to Motspur Park and its neighboring areas. By placing an order, you acknowledge the practices set out in this policy.

What Data We Collect

In order to process your order and provide a quality service, we may collect the following categories of personal data:

• Identity Data: Your first and last name.
• Contact Data: Delivery address, billing address, and (if provided) contact phone number.
• Order Information: Details of your order (such as selection of flowers, messages on cards, delivery instructions), and purchase history.
• Payment Data: Information required by our payment processor to take payment, such as card or account details (please note, we do not store your card details after your transaction is complete).
• Communication Data: Records of communication with us, including customer service requests.

Lawful Bases for Processing

We only process your personal data when we have a lawful basis to do so. Under GDPR, our lawful bases include:

• Contract: To process and fulfill your orders, including payment, delivery, and customer service.
• Legal Obligation: To comply with legal and regulatory requirements, such as accounting and tax laws.
• Legitimate Interests: For business operations such as quality control, analyzing service use, and improving our services, provided these interests do not override your rights.
• Consent: With your express permission, for example, if you ask us to send marketing materials (note: you can withdraw your consent at any time).

How We Use Your Data

We use your data for the following purposes:

• Processing and delivering your flower orders.
• Managing payments, refunds, and addressing any order issues or customer queries.
• Complying with applicable laws and record-keeping obligations.
• Improving our products and services for a better customer experience.
• With your consent, sending periodic updates about our offerings, promotions, or seasonal specials.

Data Retention

Personal data collected for order fulfillment and related customer service is retained only for as long as necessary for the purposes described above. Typically, we keep this information for up to six years to comply with legal obligations and to resolve potential future issues concerning your order, unless a longer retention period is required or permitted by law. When your data is no longer required, it is securely deleted or anonymized.

Data Processors and Third Parties

To support our business processes, we may use carefully selected third-party service providers ("processors") who help us deliver your order and manage our operations. These may include:

• Payment processing companies (for secure handling of your payment).
• IT and system administration providers (to securely host and support our business systems).
• Delivery partners or couriers (to ensure orders reach you or your recipient on time).

Whenever we engage third parties, we ensure they uphold the same level of data protection and only process your data according to our instructions and applicable law. We do not sell or otherwise share your personal data for unrelated marketing purposes.

International Data Transfers

In the unlikely event that your data is transferred outside the United Kingdom or European Economic Area (EEA), we ensure appropriate safeguards are in place to maintain its protection according to GDPR requirements.

Your Data Protection Rights

Under GDPR, you have the following rights in relation to your personal data:

• Access: You may request a copy of the data we hold about you.
• Rectification: You may correct inaccuracies or update your data.
• Erasure: You may ask us to delete your data where there is no good reason for us to continue processing it.
• Restriction: You may request restriction of processing under certain circumstances.
• Objection: You may object to the processing of your data where we rely on legitimate interests.
• Data Portability: You may request the transfer of your data to you or another provider in a structured, commonly used, and machine-readable format.
• Withdrawal of Consent: Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of any processing before withdrawal.

If you wish to exercise any of these rights, please contact us using the contact options available through our shop or website. We aim to respond to all legitimate requests within one month and may need to verify your identity for security.

Security of Your Data

Motspur Park Florist implements suitable technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. While we follow recognized industry standards, please note that no method of transmission over the internet or electronic storage is entirely secure.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, our business practices, or relevant technology. Any updates will be made available in our store and on our website. Please check this policy periodically to ensure you are aware of any changes.

Contact and Complaints

If you have any questions about this policy or how your data is processed, or if you wish to raise a concern or complaint, you may contact us via the contact information provided in-store or on our website. If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

This Privacy Policy was last updated in June 2024.