Privacy Policy for Marks Gate Florist Customers

About This Privacy Policy

This Privacy Policy explains how Marks Gate Florist ('we', 'our', 'us') handles your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Marks Gate Florist in Marks Gate and the surrounding districts. We value your privacy and are committed to ensuring your information is handled with transparency, care, and in accordance with the law.

What Data We Collect

We collect and process different types of personal data when you place an order with us, either through our website, by phone, or in person at our premises. The types of data we collect include:

  • Contact Information: Your name, recipient’s name, address, email address (if provided), and telephone number.
  • Order Details: Information regarding your order, such as items purchased, delivery instructions, and special requests.
  • Payment Information: Payment details such as transaction ID, amount, and payment method. We do not retain your complete card details. Our payment processors handle card information securely.
  • Communication Records: Records of communications between you and Marks Gate Florist, including customer service enquiries and feedback.
  • Technical Information: Data collected when you visit our website, such as IP address, browser type and cookies, to ensure website security and to analyze user engagement.

Lawful Basis for Processing

We collect and process your personal data in line with the following GDPR lawful bases:

  • Contract: To fulfill and deliver your flower orders and process payments, your data is necessary for the performance of a contract with us.
  • Legal Obligation: We process certain information to meet accounting, tax, or other legal requirements.
  • Legitimate Interests: We use your data for operational purposes, such as improving our services, ensuring website security, and responding to your queries. We always balance these interests with your rights.
  • Consent: If you opt-in to receive marketing communications, we will rely on your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is used strictly for the purposes for which it was collected:

  • To process and fulfil your orders for flowers and related products.
  • To arrange and confirm flower delivery, including contacting you or the recipient with order updates or delivery clarifications.
  • To communicate with you about your order or requests, and to respond to your customer service enquiries.
  • To comply with applicable legal requirements.
  • To improve our website and services based on aggregated, non-identifiable analytics.
  • With your consent, to send you offers and updates about our services.

How We Share Your Data

Marks Gate Florist treats your personal information with respect. In certain circumstances, we may share your data with third parties only for legitimate purposes, including:

  • Payment Processors: Trusted services that securely process your card or digital payments, in compliance with applicable data protection laws.
  • Delivery Partners: Couriers or delivery drivers who require delivery details to deliver your orders.
  • Professional Advisors and Legal Authorities: Where we have a legal obligation or to protect our rights, property, or safety.

We never sell your personal information to third parties and only share data outside the UK and EU when appropriate safeguards, as per GDPR, are in place.

Data Processors

We carefully select all data processors who may handle data on our behalf, ensuring they meet GDPR standards of security and confidentiality. Our main processors are:

  • Online payment providers, for secure transaction processing.
  • Website hosts and IT service providers, to ensure smooth website operation and data hosting.
  • Delivery subcontractors, who access only the information necessary to fulfil deliveries.

All data processors act only on our instructions and are contractually obliged to protect your personal data.

Data Retention

We retain your personal data only for as long as necessary to fulfill your order, comply with legal obligations, resolve disputes, and enforce agreements. Specifically:

  • Order and transaction records are normally kept for up to seven years, in compliance with tax and accounting regulations.
  • Communication records may be stored for three years unless a longer period is required by law or for dispute resolution.
  • Data used for marketing purposes is retained until you opt out or withdraw your consent.

After these periods, your data is securely deleted or anonymized.

Security Measures

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include secure data storage, restricted access, staff training, and regular system reviews.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have specific rights regarding your personal data:

  • The Right to Access: You can request details of the personal data we hold about you and how it is used.
  • The Right to Rectification: You can ask us to correct inaccurate or incomplete information.
  • The Right to Erasure: You may request deletion of your personal data where there is no lawful reason for its continued processing.
  • The Right to Restriction: You can ask us to restrict the processing of your data in certain circumstances.
  • The Right to Data Portability: You may request to receive your data in a commonly used format and have it transferred to another provider where feasible.
  • The Right to Object: You can object to our processing of your data, particularly where used for direct marketing.
  • The Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us using the details provided at our store or on our website. We will handle your request according to GDPR requirements and respond within the statutory timescales.

Changes to This Policy

Marks Gate Florist may update this Privacy Policy from time to time. Any significant changes will be communicated on our website or via other appropriate means. The most current version is always available in-store and online.

Contact and Further Information

If you have questions about this Privacy Policy, your rights, or wish to raise a concern, you can contact us using the contact details on our website or visit us in person. If you are unsatisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO) in the UK.

This policy was last updated on 4 June 2024.