Chinatown Florist GDPR Privacy Policy

Scope of this Privacy Policy

This Privacy Policy applies to all customers placing orders with Chinatown Florist from Chinatown and the surrounding districts. Our policy details how we collect, use, store, process, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). We are committed to respecting your privacy and safeguarding your data whenever you interact with our services.

What Data We Collect

When you use our services, order floral arrangements, or communicate with us, Chinatown Florist collects certain types of personal information to fulfill your order and provide a high-quality customer experience. The data we may collect includes:

• Identification Data: Your full name, delivery address, billing address, and, where applicable, company details.
• Contact Data: Phone number, email address, or other contact information you provide for order confirmation and updates.
• Order Details: Product selections, delivery instructions, card messages, and any additional customizations you request.
• Payment Information: Partial card details (e.g., card type, last four digits) and transaction confirmation necessary to process payments. Complete payment data is handled directly by our payment processor and is not stored by Chinatown Florist.
• Technical Data: Device type, browser type, IP address, and usage information collected through cookies and similar technologies when you use our website or digital services.

Lawful Basis for Processing Your Data

Chinatown Florist processes your personal data in line with GDPR, relying on one or more of the following lawful bases:

• Contractual Necessity: Processing is essential to fulfill orders, process payments, and deliver flowers to you or the recipient as requested.
• Legal Obligation: We are required to retain certain order and transaction data to comply with tax, accounting, and other regulatory obligations.
• Legitimate Interests: We may use your contacts to provide customer service, improve our procedures, or send limited communications about your order, where our interests are not overridden by your rights and freedoms.
• Consent: In instances where we collect data for marketing or optional features, we will seek your explicit consent, and you can withdraw this at any time.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes it was collected for, including any legal, accounting, or reporting requirements. The typical retention periods are as follows:

• Order and Transaction Data: Retained for up to seven years to satisfy tax, contractual, and compliance obligations.
• Customer Account Data: Kept as long as you maintain an active account or as otherwise necessary to provide services.
• Marketing Data: Retained until you withdraw your consent or unsubscribe from marketing communications.
• Correspondence: Stored for up to three years after our last interaction to assist with future enquiries and service improvements.

Once retention periods expire, your data will be deleted or anonymized for statistical use.

Processors and Data Sharing

Chinatown Florist works with carefully selected data processors and suppliers who help us deliver your orders and services. These include:

• Payment Processors: Handle payment details securely for transaction authorization and fraud prevention.
• Delivery Partners: May receive necessary delivery details to fulfill your order at your specified address.
• IT and Website Service Providers: Support and host our websites, order systems, and customer management tools.
• Regulatory Bodies: Where required by law, we may share relevant data with authorized authorities.

All third-party processors act only under our instructions, comply with GDPR requirements, and implement appropriate security measures to protect your personal information. We do not sell or rent your data to third parties for their marketing purposes.

How We Protect Your Data

Your trust is important to us, and we implement a variety of appropriate technical and organizational security measures. These include access controls, data encryption, secure payment gateways, and ongoing staff training. We continually assess risks to ensure your personal data is processed and stored responsibly.

Your Rights Under the GDPR

As a customer of Chinatown Florist, you have specific rights regarding your personal data:

• Right to Access: You may request details or a copy of the personal data we hold about you.
• Right to Rectification: You can request that inaccurate or incomplete data be corrected.
• Right to Erasure: In certain circumstances, you may ask that your data be deleted.
• Right to Restrict Processing: You can request that we stop processing your data in specific situations.
• Right to Data Portability: You may receive your personal data in a structured, machine-readable format or request we transmit it to another provider.
• Right to Object: You can object to processing where we rely on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you are entitled to withdraw this at any time.

To exercise any of these rights, please contact us using the usual contact methods or physical address associated with Chinatown Florist. We may require identification to ensure security before fulfilling your request.

International Data Transfers

Chinatown Florist strives to keep your data within the European Economic Area (EEA) whenever possible. Where data transfer outside the EEA is required (for example, through IT hosting providers), we ensure appropriate safeguards such as standard contractual clauses are used to protect your information in compliance with GDPR.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated by updating this document and, where appropriate, notifying you upon your next interaction with our services or order placement. The latest version supersedes all previous versions.

Contact and Further Information

If you have questions about this Privacy Policy, how Chinatown Florist uses your data, or wish to exercise your rights, please contact us by written correspondence addressed to our Chinatown Florist store. We are happy to provide further detail on our data protection practices or assistance with any aspect of your privacy rights.