Florist Barbican Privacy Policy

Introduction

This Privacy Policy explains how Florist Barbican collects, uses, and protects your personal data when you place orders with us, whether directly or through our website. It applies to all customers submitting orders from Barbican and surrounding districts. We uphold the privacy and rights of our customers in compliance with the General Data Protection Regulation (GDPR).

What Data We Collect

When you use Florist Barbican's services, we collect only the personal data necessary to fulfil your flower order and provide customer support. The types of personal data we may collect include:

• Identity Data: Your name and, if you order on behalf of someone else, the recipient’s name.
• Contact Data: Delivery address, billing address, and where relevant, telephone numbers for order coordination purposes (but we do not require them for all orders).
• Order Details: Information about the products and services you purchase (bouquets, gifts, delivery preferences).
• Payment Data: Transaction-related data. We do not retain your full payment card details as payments are processed through secure third-party providers.
• Communication Data: Correspondence if you contact us with queries or feedback.

We do not knowingly collect data about children or sensitive personal data about you.

Lawful Basis for Processing Personal Data

Florist Barbican processes your personal data lawfully based upon the following legal grounds under GDPR:

• Contract: Most data we request is necessary for us to fulfil the contract with you, such as delivering your order or resolving issues related to your purchase.
• Legal Obligation: We may need to retain some information to comply with accounting, tax, or legal requirements.
• Legitimate Interests: We may process your data when it is necessary for the legitimate interests of Florist Barbican or a third party, provided those interests are not overridden by your rights and interests. For example, to improve our services or handle disputes.
• Consent: For certain optional uses, such as direct marketing communications, we will only process your data if you have provided clear consent, which you can withdraw at any time.

Who Processes Your Data

Your personal data may be processed by members of Florist Barbican’s staff for the purposes described above. In doing so, we may use data processors (third-party service providers) to help manage orders and payments. Typical processors can include:

• Payment processors for secure transaction handling (e.g., debit/credit card gateways).
• Delivery or courier services responsible for fulfilling and delivering your order.
• IT support providers hosting our ordering system and managing data security.

We carefully select and monitor our processors to ensure they handle your data securely and in accordance with GDPR. We will never sell or rent your personal information to unauthorized third parties.

How Long We Retain Your Data

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:

• Order and delivery records: Retained for 7 years to meet legal and taxation obligations.
• Communication data: Kept for up to 2 years from your last interaction, unless required longer by legal necessity.
• Payment data: We do not retain full card details, but retain transaction records as required by law.

We will securely delete or anonymize your data once retention periods have expired or you request erasure, where applicable under GDPR.

Your Rights Under GDPR

Under the GDPR, you have the following rights in relation to your personal data held by Florist Barbican:

• Right to Access: You can request a copy of the personal information we hold about you and check that we are lawfully processing it.
• Right to Rectification: You may ask us to correct any information you believe is inaccurate or incomplete.
• Right to Erasure: You are entitled to have your personal information erased in certain circumstances, such as where the data is no longer necessary or you withdraw consent.
• Right to Restrict Processing: You may request that we suspend processing your personal information in certain cases (for example, while you verify data accuracy).
• Right to Data Portability: You can request transmission of your personal data to you or another organisation, where possible, in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to us processing your data for direct marketing purposes or where processing is based on legitimate interests.

If you wish to exercise any of your rights, please contact us using the details provided on our website or via your usual method of communication with Florist Barbican. We may need to verify your identity to fulfil your request.

Security of Personal Data

We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Our staff are trained in data protection, and only those who require access to your data for processing orders or resolving customer queries may access it.

While we take steps to secure your data, please note that no data transmission over the Internet can be guaranteed to be completely secure. However, we strive to use industry best practices to safeguard your information.

Changes to This Policy

Florist Barbican may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. When we do so, we will update the version date at the top of this policy and take reasonable steps to notify you where appropriate.

Contact and Complaints

If you have any questions about this Privacy Policy or how your personal information is handled, please refer to our contact details available on our website or in your customer paperwork. If you are not satisfied with our handling of a complaint, you may have the right to complain to the supervisory authority for data protection in the UK (the Information Commissioner's Office).