Dalston Florist Data Privacy Policy

Introduction

This Privacy Policy outlines how Dalston Florist collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Dalston Florist from Dalston and surrounding districts. By using our products and services, you agree to the collection and processing of your data as described in this document.

What Personal Data We Collect

Dalston Florist collects the following categories of personal data when you place an order or interact with us:

• Identity Data: Name, title, and, if applicable, company name.
• Contact Data: Billing address, delivery address, and phone number.
• Order Data: Purchase details including items, instructions, and preferences.
• Payment Data: Payment method and transaction records (note: we do not store full card details; these are handled securely by our payment processors).
• Communication Data: Records of correspondence and customer service interactions.
• Technical Data: IP address, browser type, and device information collected indirectly when you use our website.

We do not intentionally collect sensitive or special categories of data (such as health, ethnicity, or religious beliefs) unless required by law or supplied voluntarily by the customer.

Lawful Basis for Processing

Dalston Florist processes your personal data under specific legal bases as defined by GDPR:

• Contractual Necessity: We collect and process your data to fulfill your order and provide our products and services.
• Legal Compliance: We may be required to collect certain data to comply with laws regarding record-keeping and financial transactions.
• Legitimate Interests: We process data to improve our services, ensure the security of our operations, and communicate important information relating to your order.
• Consent: In some cases, such as for direct marketing, we will only process your data with your explicit consent. You can withdraw consent at any time.

How We Use Your Information

Your personal data may be used for the following purposes:

• To process and deliver your order efficiently and accurately.
• To communicate with you regarding your purchase, delivery status, or customer support.
• To process payments securely through authorized payment service providers.
• To improve our website, products, and customer experience.
• To comply with legal and regulatory obligations.

Data Retention

Dalston Florist retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, financial, and reporting requirements. In general, we retain personal data related to transactions for six years following the order to comply with accounting and tax obligations. Non-essential data or data processed based solely on your consent will be securely deleted or anonymized upon request or after a pre-defined period.

Data Processors & Third Parties

To provide our services, Dalston Florist engages several trusted third-party data processors, including:

• Payment processors who handle and secure payment information.
• IT service providers facilitating the secure hosting of our website and data.
• Delivery companies and couriers responsible for distributing your orders to selected addresses.
• Customer relationship management tools for communication and service improvement.

These processors act only on Dalston Florist’s instructions and are contractually bound to safeguard your data and comply with all applicable data protection regulations. We do not sell or rent your personal data to third parties for marketing or any unrelated purposes.

Your Data Protection Rights

As a data subject under GDPR, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to correct inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your data where it is no longer necessary, or where processing was based on your consent.
• Right to Restrict Processing: You may ask us to restrict or suspend processing of certain data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, where applicable.
• Right to Object: You can object to the processing of your data for direct marketing or on grounds relating to your specific situation.
• Right to Withdraw Consent: Where your data is processed on the basis of consent, you can withdraw this consent at any time.

To exercise these rights, please contact us using the contact methods available on our website or in-store. We will respond to your request within one month, unless the request is complex or numerous, in which case we will notify you of any extension.

Data Security

Dalston Florist implements appropriate security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include encryption, password protection, access controls, and regular review of our data processing practices and security policies.

International Data Transfers

Whenever possible, Dalston Florist stores your personal data within the United Kingdom or European Economic Area (EEA). If it is necessary to transfer your data outside these territories (for example, to a technology provider), we ensure appropriate safeguards are in place and that your data remains protected to GDPR standards.

Changes to Our Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal and regulatory reasons. We encourage customers to review this policy regularly. The date of the latest revision will be displayed at the top of the policy. Continued use of our services constitutes acceptance of any changes.

Contact and Complaints

If you have any enquiries about this Privacy Policy or wish to exercise your data rights, you can contact us using the methods provided on our official website or by visiting our store. Should you believe that your data protection rights have been infringed, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.