Anerley Florist GDPR Privacy Policy

Our Commitment to Your Privacy

This Privacy Policy describes how Anerley Florist collects, uses, and protects personal data of customers who place orders with us from Anerley and nearby districts. We operate in compliance with the General Data Protection Regulation (GDPR) and uphold your rights regarding your personal data.

What Personal Data We Collect

When you order products or services from Anerley Florist, we may collect and process the following categories of data, as necessary for the operation of our business and the fulfilment of your requests:

  • Identity Data: First and last names.
  • Contact Data: Delivery address, billing address, telephone numbers, and where provided, any additional contact information.
  • Order and Transaction Data: Details of the products and services you order, payment amounts, and delivery instructions.
  • Payment Data: Partial payment card details, payment confirmation codes (full card details are not stored outside secure payment processor systems).
  • Correspondence Data: Records of correspondence via order notes or when you contact us with an enquiry or complaint.
  • Marketing Preferences: Your explicit indication of consent or preference regarding receiving direct marketing.

We do not knowingly collect or process sensitive personal data (such as health or religious information) unless specifically required for an order and with your explicit consent.

Lawful Basis for Processing

Under GDPR, we must have a valid reason—or ‘lawful basis’—to process your personal data. We rely on the following legal grounds:

  • Contractual Necessity: Processing is necessary to perform our contract with you, namely to deliver products and services as you have requested.
  • Legal Obligation: We may process or retain specific data to meet our legal and regulatory responsibilities (including tax and accounting purposes).
  • Legitimate Interests: We may process data to improve our services (such as reviewing purchase patterns), as long as our interests do not override your fundamental privacy rights.
  • Consent: For direct electronic marketing, we seek your explicit consent, which you may withdraw at any time.

How We Use Your Information

The personal data we collect is used for the following purposes:

  • Processing and fulfilling your floristry orders or related services.
  • Communicating with you regarding your orders or enquiries.
  • Arranging for product delivery or collection, including the use of delivery details.
  • Managing payment and invoicing processes.
  • Responding to your comments, queries, or complaints.
  • Complying with our own record-keeping, financial, and legal obligations.
  • Sending occasional service notifications or relevant marketing information, if you have agreed to receive such communications.

How We Store and Protect Your Data

Personal data is retained in secure digital systems and (where necessary) in paper order records, both protected by access controls. We use up-to-date security measures suited to the level of sensitivity and volume of data we hold. Reasonable technical and organisational safeguards are in place to prevent unauthorised access, alteration, disclosure, or loss.

How Long We Retain Your Data

We keep your personal data only for as long as necessary for the purposes for which it was collected:

  • Order and transaction data – retained for up to seven years following the end of the financial year, to comply with tax and accounting regulations.
  • Contact and correspondence data related to queries and complaints – normally retained for up to three years after the last correspondence.
  • Marketing data – we retain your marketing preferences until you opt out or withdraw your consent at any time.

After these retention periods, personal data is securely deleted or anonymised.

Sharing Your Data with Data Processors

We sometimes share personal data with trusted third-party service providers (data processors) who assist in delivering our services, but only as needed and subject to GDPR-compliant contracts. These include:

  • Payment processors (to securely process card payments).
  • IT system providers (for secure data storage, email, and order processing platforms).
  • Professional advisors and auditors (for business administration and compliance).
  • Courier or delivery partners appointed to deliver your order.

We never sell or lease your personal data to third parties. Personal data is not transferred outside the United Kingdom or European Economic Area except where adequate safeguards are in place.

Your GDPR Rights

Under GDPR, you are entitled to the following rights regarding the data we hold about you:

  • The right to access: Request a copy of your personal data and information about our processing activities.
  • The right to rectification: Request correction of any incomplete or inaccurate data.
  • The right to erasure: You can request deletion of your data where we no longer have grounds to retain it, subject to legal or contractual requirements.
  • The right to restrict processing: Ask that we limit how we use your data.
  • The right to data portability: Request a copy of your data in a commonly used format to transfer to another provider.
  • The right to object: Object to processing based on our legitimate interests or for direct marketing.
  • The right to withdraw consent: Where we rely on your consent (such as for marketing), you can withdraw it at any time.

To exercise your rights, or if you have any concerns about how we process your data, please contact us using our website’s provided contact methods. If your concern is not resolved, you have the right to lodge a complaint with the UK Information Commissioner’s Office or your local data protection authority.

Policy Updates and Applicability

This privacy policy applies to all customers of Anerley Florist placing orders from Anerley and all surrounding districts. The policy may be updated periodically to reflect changes in legal requirements or business practices. We encourage you to consult this policy each time you submit your personal information to us. The latest version is always available on our website or on request.

Contacting Anerley Florist

If you have any questions about this privacy policy, your personal data, or your rights under GDPR, please get in touch by using the contact options on our website or by post at our shop address. We are committed to responding to your queries in a timely and transparent manner.