Creekmouth Florist Privacy Notice for Customers

Introduction

At Creekmouth Florist, your privacy and the protection of your personal information are of utmost importance to us. This Privacy Policy explains how we collect, use, store, and safeguard your data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Creekmouth Florist from Creekmouth and its surrounding districts. By placing an order with us, you agree to the terms outlined in this document.

What Data We Collect

When you place an order with Creekmouth Florist, we collect the following categories of personal data:

• Identity Information: Your full name, recipient’s name (if different)
• Contact Details: Delivery address, contact number, and where applicable, your postal address
• Order Details: Product selections, delivery date, card messages, and any specific instructions provided with your order
• Payment Information: Payment method and transaction details (note: we do not store or process your full payment card details; these are handled securely by our payment processors)
• Communication Data: Your correspondence with us, including customer service requests and feedback

We do not collect or process sensitive personal data (special categories) unless explicitly required by law or with your direct consent.

Purposes and Lawful Basis for Data Processing

We process your personal data only where we have a lawful basis to do so, as required by the GDPR. Our primary lawful bases include:

• Performance of a Contract: To process and deliver your order, provide customer support, and manage payments and refunds
• Legal Obligation: To comply with relevant laws, including tax, accounting, and anti-fraud requirements
• Legitimate Interests: For business management, record keeping, and service improvements (all undertaken with minimal impact to your rights and freedoms)
• Consent: For optional activities such as direct marketing (where we will always obtain your express consent, which you can withdraw at any time)

How We Use and Share Your Data

Your data is used solely for the stated purposes above and handled with strict confidentiality. We do not sell or rent your personal information to any third party. However, we may share your data with trusted service providers who assist us in fulfilling your orders and running our business.

• Order Fulfilment Partners: Couriers, delivery services, or subcontracted florists where necessary to deliver your order as requested
• Payment Processors: Secure third-party providers to process transactions safely (these processors do not retain payment information beyond the transaction period)
• IT and Systems Providers: Services that host our ordering system, website, or customer relationship management tools

All third-party service providers are contractually required to handle your data securely and to use it only for the purposes of delivering their services to Creekmouth Florist.

Data Retention Periods

Your personal data will be retained only for as long as necessary to fulfill the purpose for which it was collected, including satisfying any legal, accounting, or reporting requirements. The typical retention periods are as follows:

• Order and transaction data: Up to 7 years, to meet legal and tax obligations
• Customer service correspondence: Up to 2 years after resolution
• Consent-based marketing information: Until you withdraw your consent or for up to 3 years without activity

After these periods, your data will be securely deleted or anonymised.

Your Rights Under GDPR

As a customer, the GDPR grants you several rights concerning your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed
• Right to Rectification: You can ask us to update or correct incomplete or inaccurate information
• Right to Erasure: You may request deletion of your personal data, provided there is no overriding legal reason to retain it
• Right to Restrict Processing: You can request us to limit how we use your data under certain circumstances
• Right to Data Portability: You have the right to obtain your data in a commonly used format and request transmission to another provider where applicable
• Right to Object: You can object to certain types of processing, such as direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing conducted prior to withdrawal

To exercise any of these rights, please contact us using your usual methods of communication with Creekmouth Florist (for example, by submitting a written request or contacting our shop in person).

Security Measures

We are committed to ensuring your information is secure. To prevent unauthorised access or disclosure, we implement suitable physical, electronic, and managerial procedures to safeguard and secure your data. Our staff are trained in data protection best practices and only those employees who need access to your personal information are allowed to process it for the purposes described in this policy.

International Data Transfers

Your personal data is processed within the United Kingdom and European Economic Area (EEA). In the rare instance that data may be transferred outside these areas, we ensure such transfers are carried out in full compliance with data protection laws, with appropriate safeguards in place.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in regulations, our business practices, or the services we offer. Where significant changes occur, we will notify our customers in advance via suitable channels. We encourage you to review this policy regularly to remain informed about how we protect your personal data.

Contact Information and Complaints

If you have any questions or concerns regarding your privacy or how Creekmouth Florist processes your data, please reach out to us using your preferred method of contact. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are dissatisfied with our handling of your data.

Thank you for trusting Creekmouth Florist. We are committed to safeguarding your privacy and providing a secure service to all customers in Creekmouth and surrounding districts.