Brixton Florist Privacy Policy

Our Commitment to Your Privacy

At Brixton Florist, we care deeply about the privacy and security of our customers. This Privacy Policy explains how we collect, use, store, and safeguard your personal information in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Brixton Florist in Brixton and the surrounding districts, whether through our website, by phone, or in person.

What Data We Collect

When you place an order or interact with Brixton Florist, we collect the following categories of personal data:

• Contact Details: Such as your name, address, delivery address, and phone number, used to process and fulfill your order.
• Order Information: Including the items purchased, delivery instructions, order amounts, and purchase history.
• Payment Details: Although we may collect payment status and method, all sensitive payment information (e.g., card numbers) is handled securely by our third-party payment processors and is not stored by us.
• Communication Data: Any correspondence via our website, phone, or in person related to orders, queries, or complaints.
• Technical Data: Such as IP address, browser type, and device information, collected via cookies or analytics tools to improve our services and secure transactions.

Lawful Basis for Processing

We always process your personal data in accordance with applicable UK and EU data protection laws. Our lawful bases include:

• Contract Performance: We process your data primarily to fulfill your order and manage your enquiries, which is necessary for entering into or performing a contract with you.
• Legal Obligations: Certain data must be retained and processed to comply with legal, tax, and regulatory obligations.
• Legitimate Interests: To enhance our services, ensure security, prevent fraud, and improve customer support, we may process your data in ways that do not override your rights and interests.
• Consent: In some situations, where required, we may request your explicit consent, for example, to send marketing communications. You have the right to withdraw consent at any time.

Data Retention

Personal data is not held indefinitely. We retain your data only as long as necessary for the purposes described in this policy, including:

• Fulfilling orders and resolving queries.
• Maintaining records for accounting, tax, and legal compliance.
• Improving our services for analysis and business development (in anonymized or aggregated form where possible).

Typically, most personal data related to orders is retained for up to six years after your last transaction, unless a longer retention is required by law. Technical data used for analytics is generally retained for shorter periods.

Data Processors and Third Parties

To effectively provide our services, we may share your data with trusted third-party data processors. These include:

• Payment Providers: To enable secure transactions for your orders.
• Delivery Partners: If delivery is outsourced, essential information such as recipient name and address may be shared to fulfill orders.
• IT Service Providers: For hosting our website, managing communications, or storing data securely.
• Professional Advisors: Such as accountants or legal advisers where required for business or compliance purposes.

All our third-party processors are contractually obligated to protect your personal information, process it only for the intended purpose, and comply with GDPR regulations. We do not sell, rent, or trade your personal data to any other organisations for marketing purposes.

Your Data Protection Rights

Under GDPR, you have a set of important rights regarding your personal data:

• Right of Access: You can request a copy of your personal data we hold.
• Right to Rectification: You can ask us to correct any inaccuracies in your data.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your data.
• Right to Restrict Processing: You can ask us to restrict how your data is processed.
• Right to Data Portability: You have the right to obtain and reuse your data for your own purposes.
• Right to Object: You may object to data processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you can withdraw this at any time, without affecting prior processing.

To exercise these rights, please contact us through your usual point of contact or via our website. We may need to verify your identity before responding to protect your privacy. We aim to respond to all legitimate requests within one month.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our practices are regularly reviewed for effectiveness and improvement.

Policy Scope and Updates

This Privacy Policy applies to all customers placing orders with Brixton Florist from Brixton and surrounding districts. We reserve the right to update this policy to reflect changes in laws or our services. Any significant modifications will be clearly communicated on our website or at our point of sale. Please revisit this policy periodically to stay informed.

Contact and Complaints

If you have any concerns about how we handle your data, please contact us directly. If you are not satisfied with our response, you can contact the Information Commissioner's Office (ICO) in the UK for further advice or to lodge a complaint.