Florist Osidge Privacy Policy
Introduction
This Privacy Policy outlines how Florist Osidge collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. It applies to all customers placing Florist Osidge orders from Osidge and the surrounding districts. By ordering from us, you acknowledge and agree to our use of your personal information as described in this policy.
What Data We Collect
We collect a range of personal data necessary to process your orders and provide our services efficiently. This information may include:
- Identity Data: Full name, and where required, recipient names for flower deliveries.
- Contact Data: Delivery address, billing address, and occasionally other address details for accurate fulfillment of orders.
- Order Data: Details of the products you order, special instructions, order history, and delivery preferences.
- Payment Data: Transaction information (note: we do not store your card details, which are processed securely by third-party payment processors).
- Communication Data: Any correspondence between you and Florist Osidge, including inquiries, feedback, and communications regarding orders.
We do not knowingly collect or process personal data of individuals under 16 years, and our services are not directed at children.
Lawful Basis for Data Processing
We process your personal data based on the following lawful grounds as permitted by the GDPR:
- Contractual Necessity: The primary basis is the necessity of processing your data to fulfill your order, respond to inquiries, or provide customer support.
- Legal Obligations: We may process certain data to comply with legal and regulatory requirements, such as tax or record-keeping obligations.
- Legitimate Interests: In some cases, we may process your data to pursue legitimate business interests, including the protection of our services against fraud or improving customer experience, provided these interests do not override your fundamental rights.
- Consent: Where processing is not covered by the above, we will seek your clear consent, which you are free to withdraw at any time.
How We Use Your Data
Your personal data will be used solely for the purposes outlined below:
- Processing and fulfilling your orders, including arranging delivery to your designated recipient addresses.
- Communicating with you about your order status, confirmations, updates, or issues.
- Responding to your queries, support requests, or feedback.
- Maintaining accurate business records and fulfilling tax or legal requirements.
- Improving the quality of our products and customer services.
Data Retention
Your personal data is retained only as long as necessary to achieve the purposes outlined in this policy or as required by law:
- Order and transaction data is typically retained for a period of six years after fulfilment to comply with business and tax regulations.
- Contact and communication records are maintained for up to two years after your last interaction, unless a longer retention is required for legal obligations or dispute resolution.
- Payment details are not stored by Florist Osidge; payments are processed through secure, GDPR-compliant third-party providers.
Data Processors and Third Parties
Florist Osidge utilizes trusted service partners to support the delivery and processing of your orders. These data processors act according to our instructions and only process your data for the specific purposes and duration required. Data processors may include:
- Payment processing companies to handle online and card payments securely.
- Delivery partners to coordinate and fulfill order deliveries.
- IT service providers offering secure infrastructure, website hosting, and order management systems.
All our partners are bound by contracts ensuring compliance with UK and EU data protection laws. We do not sell, trade, or rent your data to third parties for marketing purposes.
International Transfers
Your data is processed within the United Kingdom or the European Economic Area (EEA). If any data is transferred outside of these locations, we ensure that appropriate safeguards are in place, as required by the GDPR, to protect your personal information.
Data Security
We implement suitable technical and organizational measures to safeguard your personal data from unauthorized access, loss, misuse, alteration, or disclosure. Access to your personal information is strictly limited to employees or agents who need it to provide our services. Regular data security reviews and staff training are conducted to uphold our commitment to data protection.
Your Rights
Under the GDPR, you have several significant rights in relation to your personal data. These include:
- Right of Access: You can request details of your personal data held by Florist Osidge.
- Right to Rectification: You can request correction or completion of inaccurate or incomplete data.
- Right to Erasure: In certain circumstances, you may request deletion of your data ("right to be forgotten").
- Right to Restriction: You can request that processing of your data be limited in specific situations.
- Right to Data Portability: You have the right to request transfer of your data to another provider where technically feasible.
- Right to Object: You can object to the processing of your data based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
To exercise these rights, please contact us using the details provided on our website. We will respond to your request without undue delay and within the legal timeframe.
Policy Updates
This Privacy Policy may be updated periodically to reflect changes in our practices or governing regulations. All updates will be posted on our official website, and significant changes will be communicated where appropriate. We encourage you to review this policy regularly to stay informed about how Florist Osidge protects your personal data.
Contacting Florist Osidge
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please refer to our website’s contact information for the appropriate method to reach us. We are committed to assisting you in exercising your rights and safeguarding your privacy at all times.
