Florist Marylebone Privacy Policy Overview

Scope of This Privacy Policy

This Privacy Policy applies to all customers who place orders with Florist Marylebone from Marylebone and its surrounding districts. By using our services, you acknowledge and agree to the collection, storage, processing, and transfer of your personal data as described below and as required by law. Florist Marylebone takes your privacy seriously and aims to handle your information transparently and securely.

What Information We Collect

Florist Marylebone collects and processes personal data necessary to fulfil your flower orders and ensure top-quality customer service. The types of personal data we may collect include:

• Identity Information: Name, title, and, if required for delivery, the recipient’s name.
• Contact Information: Address, delivery address, postcode, telephone number, and similar contact details.
• Order Details: Details of purchased flowers and arrangements, delivery instructions, notes, and messages for recipients.
• Payment Information: Payment method, transaction reference, and partial card data for payment processing (handled securely by trusted processors; we do not retain full card numbers or CVV).
• Correspondence: Any feedback, queries, complaints, or correspondence related to your order.
• Technical Data: IP address, browser type, and device information to support secure website functionality and prevent fraud.

Lawful Bases for Data Processing

We process your personal data only where required by law or where permitted under the General Data Protection Regulation (GDPR). Our main lawful bases for processing data are:

• Contractual Necessity: Processing your information is necessary to enter into or fulfil a contract (e.g., delivering your flower order, providing customer service, processing payment).
• Legal Compliance: To meet our legal obligations (e.g., accounting, tax, and record-keeping for regulatory compliance).
• Legitimate Interests: For legitimate business purposes such as improving services, security, and handling customer queries, as long as these interests are not overridden by your data protection rights.
• Consent: Occasionally, we may ask for your explicit consent, for example, when sending marketing information. You can withdraw this consent at any time.

Retention of Your Data

Florist Marylebone will keep your personal data only as long as necessary to fulfil the purposes for which it was collected and processed, including for the purposes of satisfying legal, accounting, or reporting requirements. Typically, we will retain order and payment data for up to seven years to comply with applicable tax and commercial laws. Where data is no longer necessary, or you have exercised your right to erasure, your personal information will be securely deleted or anonymised.

Processors and Data Sharing

In the course of managing your orders, we may share personal data with trusted third-party service providers ('processors') who support us in:

• Processing payments (e.g., secure payment gateways)
• Delivering your orders (e.g., local couriers)
• Providing website hosting and IT support
• Assisting with analytics and service improvements

All processors act under our instructions and are contractually bound to implement suitable data protection and security measures. We do not sell or rent your personal information to any third parties. Data may be accessed by regulatory or law enforcement bodies only where required by law.

Your Data Protection Rights

Under GDPR, you have specific rights over your personal data, including:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your data when it is no longer necessary or if you withdraw consent.
• Right to Restrict Processing: Ask us to pause processing your data in certain situations.
• Right to Data Portability: Receive your personal data in a structured, commonly used format, or ask us to transmit it to another controller.
• Right to Object: Object to processing carried out on the basis of legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right Not to Be Subject to Automated Decision Making: You will not be subject to decisions based solely on automated processing.

If you wish to exercise any of your rights, please contact us using the communication channels provided through our website or in your order confirmation materials. To protect your privacy, we may need to verify your identity before responding to requests regarding your data.

Security Measures

Your trust is important to us. Florist Marylebone has implemented appropriate technical and organisational measures designed to secure your personal data and prevent unauthorised access, loss, or disclosure. These measures include encrypted communications (SSL), secure storage, restricted access controls, and regular staff training on data protection.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The revised policy will apply from the effective date, which is always indicated at the top of the policy page. We encourage customers to review our policy regularly to stay informed about how we handle personal information.

Contact and Complaints

If you have questions, concerns, or wish to exercise your data protection rights regarding your personal data held by Florist Marylebone, please use the contact options provided on our website or refer to your order documentation for guidance. You also have the right to lodge a complaint with the relevant supervisory authority if you feel your data protection rights have not been upheld.

Thank you for trusting Florist Marylebone. We are committed to protecting your privacy while providing beautiful floral arrangements and service, every time you choose us.