Bankside Florist Privacy Policy

Introduction

This Privacy Policy explains how Bankside Florist collects, uses, protects, and manages your personal data when you place an order with us. Our policy is designed to comply with the European Union General Data Protection Regulation (GDPR) and applies to all customers placing orders with Bankside Florist from Bankside and the surrounding districts. We are committed to safeguarding your privacy and ensuring your data is managed responsibly.

What Data We Collect

When you place an order or interact with Bankside Florist’s services, we collect the following types of personal information:

• Identification Data: Name, surname, and where required, company name.
• Contact Data: Delivery address, billing address, postcode, phone number, and, if applicable, special delivery instructions.
• Order Details: Products purchased, order notes, card messages, delivery date and time.
• Payment Data: Payment method and transaction details (note: we do not store your complete credit/debit card numbers but may process them via secure authorized third-party services).
• Communication Data: Correspondence with customer service, feedback, and queries.
• Website Usage Data: Information collected by cookies or similar technology related to site navigation, visit times, and device details.

Lawful Basis for Processing Data

Bankside Florist only processes your personal data when there is a clear legal foundation, as outlined by Articles 6 and 9 of the GDPR:

• Performance of a Contract: We require your data to process and deliver your orders and to fulfil our contractual obligations to you.
• Legitimate Interests: Certain uses of your data, such as for service improvement and fraud prevention, are based on our legitimate interests, provided these do not override your rights and freedoms.
• Legal Obligations: We may be required by law to retain certain information for tax or accounting purposes.
• Consent: Where necessary, for example for sending you promotional messages, we will only process your data with your explicit consent. You may withdraw consent at any time.

How We Use Your Data

Your data is used strictly for the purposes outlined below:

• Order Processing and Fulfilment: To process your orders, arrange delivery, and communicate updates regarding your purchase.
• Customer Support: To resolve your queries, issues, or complaints and to provide after-sales support.
• Service Improvement: Analyzing usage data helps us enhance our website and services.
• Legal Compliance: To fulfil taxation, accounting, anti-fraud, or other regulatory requirements.
• Marketing Communications: Only where you have opted-in, to provide information about our latest products, offers, or updates.

Data Retention Periods

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements:

• Customer Order Data: Retained for up to 7 years from the date of transaction to comply with financial and legal record-keeping obligations.
• Customer Service Communications: Usually, kept for up to 2 years after issue resolution to ensure high-quality service.
• Marketing Preferences: Maintained until you opt out or withdraw consent.
• Cookie and Website Usage Data: Retained in accordance with our cookie policy settings or as required for analytical purposes.

Upon expiry of these periods, your data will be securely deleted or anonymized to prevent identification.

Data Processors and Third Parties

To enable our operations and provide you with the best service, Bankside Florist may share your data with carefully selected third parties (data processors) such as:

• Payment Processors: To securely process payments without storing your full payment details.
• Delivery Partners: For arranging the successful and timely delivery of your orders.
• IT and Cloud Service Providers: For maintaining secure, reliable systems, and data storage.
• Professional Advisors: Including accountants or legal experts, as required for compliance purposes.

All third parties are contractually required to keep your information confidential and to process it only for agreed purposes. Data is not transferred outside the European Economic Area (EEA) unless adequate safeguards are in place, as permitted by GDPR.

Your Privacy Rights

Under GDPR, you have several rights in relation to your personal data:

• Right of Access: You can request a copy of your personal data we hold.
• Right to Rectification: You may ask us to correct or update inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your data, subject to legal retention obligations.
• Right to Restrict Processing: You may ask us to limit the way we use your data in certain situations.
• Right to Data Portability: You can ask for your data in a commonly used machine-readable format for transfer to another provider.
• Right to Object: You may object to our use of your data in some cases, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You can contact your local data protection authority if you have concerns about your data handling.

To exercise any of these rights, or to ask questions regarding your data, please contact us using the details on our website or reach out in writing to our registered address.

Policy Updates

Bankside Florist may update this Privacy Policy periodically to reflect changes in our practices or for legal compliance. Any changes will be effective upon posting the revised version and we encourage you to review this policy regularly. Continued use of our services constitutes acceptance of these changes.

Contact and Further Information

If you have any questions, requests, or concerns about this Privacy Policy or how we manage your personal data, please contact us using the contact details provided on our website or by writing to our business address. We are committed to addressing your privacy needs in a timely and transparent manner.