Richmond Flowers Privacy Policy and Data Protection
Introduction
At Richmond Flowers, we are committed to protecting your privacy and ensuring that your personal data is handled transparently and securely. This Privacy Policy explains how we collect, use, store, and protect the personal information of customers placing orders with Richmond Flowers in Richmond and the surrounding districts. It also outlines your rights under the General Data Protection Regulation (GDPR).
What Data We Collect
Richmond Flowers collects certain types of personal data in order to process your orders and provide the best possible service. The types of data we may collect include:
- Identification Data: Your name, address, and contact details (such as phone number and postal address).
- Order Information: Details of flower orders you place, including delivery address, recipient's name, and any personalized messages.
- Payment Data: Payment card details or financial transaction information (note: payment data is processed securely by third-party payment processors and not stored by us).
- Communication Data: Any correspondence or communications between you and Richmond Flowers regarding orders, inquiries, or feedback.
- Technical Data: Information about your browser or device, IP address, and access times collected for security and site optimization purposes.
Lawful Basis for Processing Data
Richmond Flowers processes your personal data in accordance with the GDPR, and only when there is a lawful basis to do so. The main lawful bases we rely upon include:
- Contractual Necessity: We need certain personal data to fulfill and deliver your flower orders, and to provide customer support.
- Legal Obligation: Processing may be necessary for us to comply with legal requirements, such as tax and accounting regulations.
- Legitimate Interests: We may use your data for legitimate business purposes, such as improving our products or services, ensuring the security of our systems, or maintaining customer records in case of queries or claims.
- Consent: If we wish to use your data for marketing purposes or any activity not covered by the above bases, we will only do so with your explicit consent. You can withdraw your consent at any time.
How Your Data Is Used
Your personal data is used solely for the purposes for which it was provided, such as:
- Processing and fulfilling your flower orders.
- Delivering flowers to the designated recipients.
- Communicating with you about your order status, delivery, or any queries.
- Complying with statutory and regulatory requirements.
- Improving our products and services.
Data Retention
We retain your personal data no longer than is necessary for the purposes for which it was collected. The retention period may vary depending on:
- Order and Transaction Data: Typically retained for up to seven years to comply with legal, accounting, and tax obligations.
- Customer Communications: Retained for up to two years after your last interaction with us, unless otherwise required by law.
- Technical Data: Retained for security and statistical analysis, generally for up to one year.
After these periods, your personal information is either securely deleted or anonymised so it can no longer be associated with you.
Processors and Data Sharing
Richmond Flowers may work with trusted third-party service providers (processors) who assist with specific business operations. These include, but may not be limited to:
- Payment processors: For secure handling of payments and transaction processing. These providers process your payment information on our behalf but do not retain payment details after the transaction is completed.
- Delivery partners: To arrange for the dispatch and delivery of flower orders to recipients.
- IT and technical support providers: For website hosting, maintenance, and security services.
All processors are contractually obligated to protect your data, keep it confidential, and act only on our instructions. Richmond Flowers does not sell or rent your personal information to third parties for marketing purposes.
How We Protect Your Data
We take appropriate technical and organizational measures to safeguard your personal information from loss, theft, misuse, or unauthorized access. Measures include secure servers, encryption protocols, restricted access controls, and regular security reviews and staff training.
Your Rights Under GDPR
Under GDPR, you have a number of important rights in relation to your personal data, including:
- Right to Access: You can request confirmation whether we hold your personal data and obtain a copy of that data.
- Right to Rectification: If your information is incorrect or incomplete, you may request correction or update.
- Right to Erasure (‘Right to be Forgotten’): You may request deletion of your personal data where there is no lawful reason for us to continue processing it.
- Right to Restriction: You can ask us to restrict processing of your personal data under certain circumstances.
- Right to Data Portability: Where applicable, you can request that we transfer your data to another service provider.
- Right to Object: You have the right to object to processing based on legitimate interests, or to direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.
If you wish to exercise any of these rights, please contact us. We will respond to your request as soon as possible, and always within the timeframes required by law.
Policy Scope and Updates
This Privacy Policy applies to all customers who place orders with Richmond Flowers from Richmond and the surrounding districts. We may update this policy from time to time to reflect legal or operational changes. The latest version will always be made available on our website. We encourage you to review this policy regularly to stay informed about how we protect your data.
Contact and Complaints
If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise your GDPR rights, please contact us as outlined at the end of this policy. If you are not satisfied with our response, you also have the right to lodge a complaint with the relevant supervisory authority.
