Florist Millwall Privacy Policy for Customers

Introduction to Our Privacy Policy

At Florist Millwall, safeguarding your personal information is of the utmost importance to us. This privacy policy outlines how we collect, store, use, and protect your data when you place orders for our products and services within Millwall and the surrounding districts. We are committed to full compliance with the UK General Data Protection Regulation (GDPR) and related legislation.

Scope of the Policy

This privacy policy applies to all individuals who place orders with Florist Millwall, either directly or via our website, telephone, or in-store, and who reside in or request deliveries to Millwall and neighbouring areas. By using our services, you acknowledge and agree to the practices described below.

What Data We Collect

To efficiently fulfil your orders and enhance your experience, we collect various types of personal information, which may include:

• Identity Data: Name, title
• Contact Data: Delivery address, billing address, telephone number (optional), and any other contact details you provide
• Order Data: Details of products purchased, order history, delivery requirements, and card messages
• Payment Data: Transaction details (Note: Card details are processed securely and are not stored by us)
• Communications: Correspondence you have with us relating to your orders
• Technical Data: IP addresses, browser type, and information gathered through cookies when you use our website

How We Use Your Data

Florist Millwall uses your personal data to:

• Process and fulfil your flower orders and deliveries
• Communicate order confirmations, delivery updates, and respond to your customer service requests
• Manage billing and process payments securely
• Improve our services, website experience, and operational efficiency
• Comply with legal, regulatory, and tax requirements
• Send you occasional updates about our services and promotions, only where lawful and with your consent

Lawful Basis for Processing Your Data

In accordance with GDPR, we process your personal data based on the following lawful grounds:

• Contractual Necessity: To take steps to enter into and fulfil our contract with you when you place an order
• Legal Obligation: Where necessary for compliance with legal or regulatory requirements
• Legitimate Interests: To enhance our services, manage risk, and communicate efficiently. In all such cases, we carefully assess and balance your rights and interests
• Consent: For any marketing communications where you have agreed to receive them, consent may be withdrawn at any time

How We Store and Protect Your Data

We maintain strict security protocols to ensure your data is protected from loss, misuse, unauthorised access, disclosure, or alteration. Personal data is stored securely on our premises and/or on secure servers provided by our trusted data processors. Access to customer data is strictly limited to staff and processors who require it to fulfil our services.

Data Retention: How Long We Keep Your Information

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally, this means we will retain customer order data for 7 years after your last purchase, as required for tax and accounting obligations. After this period, your data will be securely deleted or anonymised.

Third-Party Processors and Data Sharing

To provide our services effectively, we may share portions of your data with trusted third parties, such as payment processors, delivery partners, website hosting providers, and IT support services. All such processors are contractually bound to protect your information and may only process it in accordance with our instructions and GDPR requirements. We do not sell or trade your data to third parties for marketing purposes.

Your Rights Under GDPR

As a customer, you have robust rights over your personal data, including:

• Right to Access: Request access to the personal data we hold about you
• Right to Rectification: Correct any inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances (subject to legal or contractual obligations)
• Right to Restrict Processing: Request restriction of how we use your data
• Right to Object: Object to our processing of your data under legitimate interests or for direct marketing
• Right to Data Portability: Request a copy of your personal data in a portable format, where applicable
• Right to Withdraw Consent: Withdraw consent at any time for data processed on this basis

If you wish to exercise any of these rights, please contact us via our website or shop in Millwall.

Changes to This Privacy Policy

We may review and update this privacy policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you in advance. We encourage you to periodically review this policy to remain informed of how we protect your data.

Contact and Complaints

Should you have any questions about how we handle your personal data, or if you wish to make a complaint, please contact us through our website or at our Millwall shop. If you remain dissatisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO) for further guidance or to lodge a complaint.

Florist Millwall is dedicated to respecting your privacy and ensuring you have a safe, secure, and positive experience each time you order with us.