Privacy Policy for Customers Ordering from Brockley Florist

Name: AMALFI LOVE
Brand: Brockley Florist
Price: 65.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Brockley Florist collects, uses, protects, and processes your personal data when you place an order as a customer in Brockley and the surrounding districts. We are committed to safeguarding your personal information and complying with the General Data Protection Regulation (GDPR) and relevant UK data protection laws.

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Brockley Florist for flower delivery and related services across Brockley and neighbouring areas. By placing an order or interacting with us in connection with an order, you consent to the collection and processing of your personal information as described in this policy.

Personal Data We Collect

When you place an order with Brockley Florist, we collect a variety of information necessary to process and fulfil your order, communicate with you, and provide our services. The data we may collect includes:

Contact Information: Your full name, telephone number, billing address, delivery address, and postcode.
Order Details: Details of flowers, gifts, delivery date and preferences, messages to recipients.
Payment Information: Payment card or transaction details (processed by secure third-party providers where applicable; we do not retain full payment card numbers).
Recipient Information: Recipient’s name, address, and telephone number for delivery purposes.
Communication Records: Any communications sent to and from Brockley Florist regarding your order (including phone, web forms, or written correspondence).
Technical Data: IP address, browser type, and information gathered via cookies if you use our website for ordering or contact forms.

Lawful Basis for Processing Your Data

We only process your personal data when we have a valid legal basis to do so under GDPR. The specific lawful bases we rely on include:

Contractual necessity: Most data is processed because it is necessary to fulfil your order, process payments, contact you (or the recipient) for delivery, or address queries you may raise.
Legal obligation: We may retain some information where required to comply with UK law, such as record-keeping for tax or accounting purposes.
Legitimate interests: Certain data is kept for our legitimate business interests, for example, to improve our services, respond to customer queries, or prevent fraud—provided your rights do not override these interests.
Consent: Where required, such as for certain types of marketing communication, we will seek your explicit consent.

How We Use Your Personal Data

Brockley Florist uses your personal data for the following purposes:

Processing and fulfilling your order, including delivery to the specified recipient.
Communicating with you about your order status, questions, amendments, delays, or substitutions.
Managing payments and refunds securely via authorised payment processors.
Maintaining accurate records of orders, payments, and communications in line with our legal and accounting obligations.
Improving and personalising our services based on your preferences and feedback.
Following up on customer queries or complaints where necessary.

Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general:

Order and delivery records: Retained for up to 7 years to comply with legal and tax obligations.
Customer correspondence and queries: Retained for up to 2 years after resolution of your enquiry or complaint.
Payment details: Not stored by Brockley Florist beyond transaction confirmation; payment processing is handled through secure external providers.

When data is no longer required, it will be deleted or securely anonymised.

Data Sharing and Processors

We only share your personal data where it is necessary to provide our services or comply with the law. Third parties who may process your data under our instruction include:

Payment processing services that handle and validate card payments securely.
Delivery partners or couriers responsible for delivering your order to the recipient.
IT and infrastructure providers who host our systems and website in compliance with data protection standards.
Accountants or legal professionals (when required) for compliance with legal obligations.

All third-party processors are contractually obliged to process your data safely and in accordance with GDPR. We do not sell or rent your data to third parties.

Your Rights

Under the GDPR, you have the following rights concerning your personal data:

Right of access: You can request a copy of personal information we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete data.
Right to erasure: You have the right to request deletion of your personal data if it is no longer necessary for us to hold it, unless retention is required by law.
Right to restrict processing: You may request we limit the way we use your data in certain circumstances.
Right to object: You can object to processing your data for specific purposes, such as direct marketing.
Right to data portability: You may request we transfer your data to another provider when technically feasible.
Right to withdraw consent: Where processing is based on your consent, you can withdraw this at any time.

To exercise any of these rights, please contact us in writing using the contact details published on our website or order receipt. We may require confirmation of your identity before processing your request. We will respond within one month as required by law.

Security of Your Data

Brockley Florist implements appropriate technical and organisational measures to keep your personal data safe from loss, misuse, unauthorised access, disclosure, or destruction. These measures include secure storage systems, access controls, and staff training in data protection. While we make every effort to protect your data, transmission of information over the internet cannot be guaranteed to be 100% secure.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in legal requirements or our data practices. We encourage you to revisit this page from time to time to stay informed of any changes.

Contact Us

If you have any questions or concerns about your personal data, or wish to make a request regarding your rights, please refer to our website or use published contact information for further assistance.