Florist Hatton GDPR Privacy Policy

Introduction

Florist Hatton values your privacy and is committed to safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and protect information from customers who place orders with Florist Hatton in Hatton and the surrounding districts, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Scope of This Policy

This Privacy Policy applies to all Florist Hatton customers purchasing or inquiring about products or services from Hatton and the surrounding areas. By placing an order or engaging with our services, you acknowledge that you have read and understood this policy and consent to our data practices as described herein.

What Data We Collect

Florist Hatton collects the following categories of personal data from customers:

• Contact information: such as your name, delivery address, billing address, and telephone number
• Order details: including details of floral arrangements, recipient names and addresses, order notes, and specific delivery instructions
• Payment information: such as limited payment card details provided during transactional processing (handled securely by payment service providers)
• Communication records: including correspondence via written notes or order queries
• Website usage information: such as IP addresses and browsing actions when interacting with our website; this may be collected through essential cookies and analytic tools

Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful basis to process your personal information. Florist Hatton relies on the following lawful bases:

• Contractual necessity: Processing your data is necessary for fulfilling your orders and providing our services, including confirming orders, delivering floral products, and handling payment transactions.
• Legal obligation: We may process your data to comply with legal and regulatory requirements, such as maintaining records for tax and accounting purposes.
• Legitimate interests: We process your data to improve our products and services, prevent fraud, and enhance user experience, provided that such interests do not override your rights and freedoms.

How We Use Your Personal Data

Your personal data is used strictly for the following purposes:

• To process, fulfill, and deliver your orders accurately and efficiently
• To communicate with you regarding your order, delivery status, or responses to your queries
• To manage payments and detect or prevent fraudulent transactions
• To comply with applicable legal obligations and resolve any disputes
• To maintain our internal records and improve service quality

Data Retention

Florist Hatton will only retain your personal data for as long as is necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting requirements. Typically, this means we retain:

• Order records and payment information for up to six years after fulfillment, in line with standard accounting practices
• Communication records for up to two years after your last order, unless a longer retention period is required by law
• Website analytics data in anonymised form for up to 24 months

Data Processors and Sharing of Data

We may share certain personal data with trusted third-party service providers that act on our behalf and assist in delivering our services. These may include:

• Payment processing companies for secure handling of transactions
• IT and website hosting providers supporting our technical infrastructure
• Delivery and logistics partners responsible for transporting floral orders
• Professional advisors, such as accountants or legal firms, for compliance purposes

Florist Hatton requires all third-party processors to agree to strict data protection and confidentiality terms consistent with GDPR. Your data is never sold to other companies or processed outside the European Economic Area without adequate safeguards.

Your Rights Under GDPR

As a customer placing orders with Florist Hatton, you are entitled to the following rights concerning your personal data:

• The right to access: You can request a copy of the personal data we hold about you.
• The right to rectification: You can request that we correct any inaccurate or incomplete information.
• The right to erasure: You may request deletion of your personal data where there is no legal reason for its continued retention.
• The right to restrict processing: You have the right to restrict how we use your personal data in certain circumstances.
• The right to object: You may object to the processing of your personal data based on legitimate interests.
• The right to data portability: You have the right to request that your data be transferred to another service provider where feasible.

To exercise these rights, you may contact us using the details provided on our website or contact page. Please note that we may need to confirm your identity before processing a request, and certain rights are subject to legal limitations.

Children's Privacy

Florist Hatton's services are not directed to children under the age of 16. We do not knowingly collect personal data from anyone under 16 years of age. If you believe a child has provided us with personal information, please inform us so that we can remove such data promptly.

How We Protect Your Data

We adopt appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of your personal data. This includes secure storage, restricted access, regular staff training, and compliance with industry best practices to prevent unauthorized access, loss, or misuse of your information.

Changes to This Policy

Florist Hatton may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The latest version will always be available on our website. We encourage you to review it periodically for any updates.

Contact and Concerns

If you have any questions, concerns, or wish to exercise any of your GDPR rights regarding your personal data held by Florist Hatton, please reach out through our website's designated contact details. We are committed to addressing your privacy inquiries promptly and transparently.