Mitcham Florist Privacy Policy Overview

Scope of This Privacy Policy

This Privacy Policy applies to all customers placing orders with Mitcham Florist from Mitcham and the surrounding districts. We are committed to handling your personal data responsibly and in accordance with the General Data Protection Regulation (GDPR). By using our products and services, you acknowledge and agree to the terms and practices outlined below.

What Personal Data We Collect

Mitcham Florist collects and processes the following categories of personal data to provide and improve our services:

• Contact Information: Full name, postal address (for delivery and billing), and, where relevant, the recipient's name and address.
• Order Information: Details of products ordered, delivery instructions, and any gift messages you provide.
• Payment Information: Limited payment data, such as payment method and transaction ID. We do not store full card details; payment is processed through secure third-party processors.
• Communication: Any correspondence sent to us, including queries, complaints, or feedback, may be recorded.
• Technical Data: When you use our website, we may collect certain technical information such as IP address, browser type, and device identifiers, primarily for security and analytics purposes.

Lawful Basis for Data Processing

Under the GDPR, we process your personal data under several lawful bases, depending on the specific context and purpose:

• Contractual Necessity: Most of the data we collect is necessary to fulfill and deliver your order, respond to your requests, and provide customer support.
• Legal Obligations: We may retain and process data to comply with relevant laws and regulations (such as tax and accounting requirements).
• Legitimate Interests: We may process data to improve our services, prevent fraud, and ensure the security of our operations, provided such interests are not overridden by your data protection rights.
• Consent: Where required, such as for marketing communications, we will ask for your express consent and you may withdraw this at any time.

How We Use Your Information

The data we collect is used only for the following purposes:

• Processing and delivering orders placed via our website, phone, or in-store.
• Managing customer accounts, billing, and payment processing.
• Communicating order updates and responding to enquiries.
• Improving our products, services, and website experience.
• Meeting our legal and regulatory obligations.
• Sending marketing communications if you have opted in to receive them.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The specific retention periods are as follows:

• Order and Transaction Data: Kept for up to 7 years, in accordance with tax and accounting requirements.
• Marketing Data: Retained for as long as you consent to receive communications, or until you opt out.
• General Correspondence: Retained for up to 3 years for customer service and quality assurance.
• After retention periods expire, data is securely deleted or anonymised.

Sharing and Processing of Data

We only share your personal data where necessary and in accordance with GDPR principles:

• Payment Processors: Secure third-party payment processors manage transactions on our behalf. We do not have access to or retain full payment card information.
• Delivery Partners: We may share recipient names, addresses, and delivery instructions with our trusted couriers or drivers as required for fulfillment.
• IT Service Providers: Providers who support our website, payment, or communication infrastructure may have limited access to your data when necessary to perform support or maintenance.

All third-party processors are required to comply with data protection laws and to act only on our instructions. We do not sell your data to third parties under any circumstances.

Your Rights Under GDPR

You have several important rights in relation to your personal data under UK and EU data protection law:

• Right of Access: You may request details of the personal data we hold about you and how it is processed.
• Right to Rectification: If your data is incorrect or incomplete, you can ask us to correct or update it.
• Right to Erasure: In certain circumstances, you can request the deletion of your personal data.
• Right to Restrict Processing: You may request us to restrict the processing of your data in certain situations.
• Right to Data Portability: Where applicable, you may request to receive your data in a machine-readable format or have it sent to another data controller.
• Right to Object: You can object to data processing based on legitimate interests or direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.

If you wish to exercise any of these rights, you may contact us using the contact methods provided on our website or in your order confirmation documents. We may require verification of your identity to fulfill your request and will respond within the statutory timeframes.

Data Security

Mitcham Florist takes reasonable and appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures are regularly reviewed and updated in line with technological developments and our business needs. While we strive to protect your information, no system can be guaranteed completely secure. We advise you to take care in sharing your personal data online.

Changes to This Policy

We periodically review this Privacy Policy and may make changes to remain compliant with legal requirements and reflect operational changes. Any updates will be posted on our website with the updated effective date. We encourage you to review this policy regularly to stay informed about how we process your data.

Contact Us

If you have questions or concerns regarding this Privacy Policy or our data protection practices, please refer to the contact details on the Mitcham Florist website or the documentation provided with your order. We will make every effort to address your enquiry promptly and thoroughly.