Leamouth Florist GDPR Privacy Policy

Introduction

This Privacy Policy describes how Leamouth Florist collects, uses, stores, and safeguards your personal data when you order products or services from us. Our practices comply with the General Data Protection Regulation (GDPR) and apply to all customers placing Leamouth Florist orders from Leamouth and the surrounding districts.

What Data We Collect

When you place an order or contact Leamouth Florist, we collect only the information necessary to fulfil your request and ensure a smooth ordering experience. The personal data we may collect includes:

  • Identification Information: Your full name.
  • Contact Information: Address for delivery or billing, phone number, and (if provided) email address.
  • Order Information: Details of the products and services you purchase, delivery instructions, and payment details (note: payment information is processed securely by authorised payment processors, and we do not retain card details).
  • Communication Data: Any feedback, correspondence or information you provide via contact forms, notes, or over the phone.

Lawful Basis for Processing Data

Under the GDPR, we must have a recognised lawful basis for collecting and using your personal data. Leamouth Florist relies on the following bases:

  • Contractual Necessity: To process and deliver your orders and fulfill any agreement we have entered into with you.
  • Legal Obligation: To comply with UK laws related to recordkeeping and transaction reporting.
  • Legitimate Interests: To improve our services, respond to customer enquiries, protect against fraud, and maintain security.
  • Consent: Where required—for example, for marketing communications—you have the right to withdraw your consent at any time.

How We Use Your Data

We use your data solely for the purposes for which it was collected. These purposes include:

  • Processing and delivering your floral orders.
  • Communicating order updates, confirmations, or customer service responses.
  • Fulfilling statutory obligations related to financial record keeping.
  • Improving order fulfilment and our customer experience, where legitimate interest applies.
  • Preventing fraudulent transactions and enhancing security.
  • With your express permission, sending information about our services or promotional offers (you may opt out at any time).

Who Processes Your Data

Leamouth Florist treats your personal data confidentially. We may share your information with trusted processors necessary for order completion and business administration. These third parties are contractually obligated to comply with data protection laws and only process your data according to our instructions. Typical processors include:

  • Payment service providers who securely manage payment transactions.
  • IT service providers who support our website and order management systems.
  • Delivery couriers responsible for transporting your orders.
  • Professional advisers, such as accountants, for legal compliance.

We do not sell or rent your data to marketers or unauthorised third parties.

Data Retention

Leamouth Florist retains personal data only as long as required for the purposes outlined above or as required by law. Generally, order and transaction data is kept for up to seven years for accounting and tax purposes. Data used for customer communications or marketing (with your consent) is retained until you withdraw your consent or request its deletion.

How We Secure Your Data

Your data is stored securely using technical and organisational safeguards appropriate to the sensitivity of the information. This includes restricted access, encryption (where appropriate), and regular review of our data protection practices. Only authorised staff and processors with a genuine business need will access your personal data.

Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

  • The right to access – You may request a copy of the personal data we hold about you.
  • The right to rectification – You can request correction of any inaccurate or incomplete data.
  • The right to erasure – You may request the deletion of your personal data when it is no longer necessary for the purpose it was collected.
  • The right to restrict processing – You may ask us to limit the use of your data under certain circumstances.
  • The right to object – You may object to certain types of data processing, such as direct marketing.
  • The right to data portability – You can request that we transfer your data to another organisation or directly to you.
  • The right to withdraw consent – Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before its withdrawal.

If you would like to exercise any of your rights, please contact us. We may need to verify your identity before fulfilling certain requests.

Scope of This Policy

This policy applies to customers placing orders with Leamouth Florist from Leamouth and the surrounding districts. By ordering from us and providing your personal data, you acknowledge the processing described in this policy.

Changes to This Privacy Policy

We may update this Privacy Policy at any time to reflect changes in our practices or relevant laws. The updated version will always be made available to you when you request it or when you access our services. We encourage customers to review this notice regularly.

Contact and Concerns

If you have any concerns regarding how Leamouth Florist uses your personal data or wish to make a complaint, please contact us. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we have not handled your data compliantly. We take privacy seriously and will respond promptly to your enquiries.