Privacy Policy for Customers of Florist Mayfair

Scope of This Privacy Policy

This Privacy Policy outlines how Florist Mayfair collects, uses, stores, and protects your personal information. It applies to all customers placing orders with Florist Mayfair from Mayfair and the surrounding districts. Our commitment is to comply with the General Data Protection Regulation (GDPR) and provide transparency in our practices regarding your personal data.

What Data We Collect

When you place an order or interact with Florist Mayfair, we may collect the following categories of personal data:

• Personal Identification Details: Name, address (billing and delivery), and any instructions related to your order.
• Contact Information: Phone number and email address for order confirmations, updates, and customer service.
• Order Details: Floral preferences, delivery dates and times, messages to be included with your order, and purchase history.
• Payment Information: Payment method details (note: card information is processed securely by payment processors and is not stored on Florist Mayfair systems).
• Technical Data: IP address, browser type, device identifiers, and other technical data collected automatically when you use our website for security, analytics, and service improvements.

Purpose and Lawful Basis for Processing

The GDPR requires us to outline the legal basis for processing your data. Florist Mayfair processes your personal data under the following lawful bases:

• Contractual necessity: We process your data to fulfill our contract with you, including confirming your order, processing payments, and delivering your flowers.
• Legal obligation: We may need to process certain data to comply with legal and regulatory requirements, such as tax laws and record-keeping obligations.
• Legitimate interests: We may use your data to improve our services, prevent fraud, or send you information related to your existing orders.
• Consent: If we send you marketing communications not connected to your order, we will only do so if you have provided your explicit consent. You can withdraw this consent at any time.

How We Use Your Data

Florist Mayfair uses your personal data to:

• Process and deliver your orders accurately and efficiently.
• Communicate with you regarding your order status, delivery, and customer service requests.
• Comply with legal and regulatory requirements.
• Improve our products, services, and customer experience.
• Respond to your queries, concerns, or feedback.

Data Retention

We retain your personal data only for as long as is necessary for the purposes it was collected, including for fulfilling orders, maintaining records for legal or accounting purposes, and responding to any follow-up queries. Normally, we will:

• Retain order and transaction data for up to seven years, in compliance with tax and legal obligations.
• Delete or anonymise your personal data when it is no longer required for the aforementioned purposes.

Data Processors and Sharing Data

Florist Mayfair may engage trusted third-party service providers (“processors”) to help us deliver our services, for example:

• Payment processors: Securely handle customer payments. Your card information is never stored by Florist Mayfair.
• Delivery partners: Receive your name, address, and contact details to ensure timely and accurate delivery of your flowers.
• IT and hosting providers: Protect and store data securely, including backup and maintenance functions.

All processors acting on our behalf are bound by contract to process your data only as instructed and to keep it secure and confidential in accordance with GDPR requirements. We do not sell, rent, or share your personal data with third parties for marketing purposes.

International Transfers

Florist Mayfair stores your data within the United Kingdom and the European Economic Area (EEA) whenever possible. If we need to transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information in accordance with GDPR.

How We Protect Your Personal Data

Your privacy is important to us. We implement appropriate technical and organizational measures to safeguard your data, including:

• Encryption of sensitive data during transmission and storage, where applicable.
• Access controls and staff training to minimize unauthorized access.
• Regular testing of our systems for vulnerabilities and compliance checks.

Your Rights Under the GDPR

You have several rights regarding your personal data under GDPR, including:

• Right to access: You can request a copy of the personal information we hold about you.
• Right to rectification: You can ask us to update or correct inaccuracies in your personal data.
• Right to erasure: You can request deletion of your personal data where there is no legal basis for continued processing.
• Right to restriction: You can request that we limit the way we use your data in certain circumstances.
• Right to object: You can object to processing based on our legitimate interests or direct marketing.
• Right to data portability: You can request that we transfer your data to another provider where technically feasible.

To exercise these rights or to raise any concerns about how your data is handled, you may contact us through our website's designated privacy channels.

Changes to This Privacy Policy

Florist Mayfair may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or customer feedback. The most current version will always be available on our website. Please review this page regularly to stay informed about how we protect your personal information.

Contact and Queries

If you have questions about this Privacy Policy or your personal data, please reach out via the contact details and forms provided on our website. We are committed to responding promptly and transparently to your inquiries and requests regarding your data privacy.