Florist Belvedere Privacy Policy

Introduction

This Privacy Policy sets out how Florist Belvedere ('we', 'us', or 'our') collects, uses, retains, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Florist Belvedere, whether residing in Belvedere or surrounding districts. We are dedicated to transparency and responsibility in our handling of your data.

What Data We Collect

To provide our products and services, we may collect the following categories of personal data:

• Identity Data: Name, title, and, if necessary, information relating to order recipients.
• Contact Data: Delivery address, billing address, and occasionally, instructions for delivery.
• Communication Data: Your correspondence with us, including feedback, complaints, and inquiries.
• Transaction Data: Details about payments to and from you, as well as information about products you have purchased from us.
• Technical Data: IP address, browser type, device data, access times, and other technology on the devices used to access our website, collected via cookies or similar technologies.
• Marketing and Preferences Data: Information about your preferences for receiving marketing from us or third parties and your communication preferences.

The Lawful Basis for Processing Your Data

Under GDPR, we are required to identify a lawful basis for each of our data processing activities. We process your information on the following grounds:

• Performance of a contract: Most of the data we collect is necessary to process and fulfill your orders, including delivery and payment details.
• Legal obligation: We may need to process your information to comply with relevant legal or regulatory requirements.
• Legitimate interests: Processing may be necessary for our legitimate interests, such as enhancing our services, protecting our business from fraud, or handling your inquiries, provided these interests are not overridden by your rights.
• Consent: For activities such as direct marketing communications, we will only use your personal data if you have provided consent, which can be withdrawn at any time.

How We Use Your Data

Your information is used for the following purposes:

• To provide and deliver the products you have ordered
• To communicate with you about your orders or account
• To improve and personalize your experience with our services
• For internal record keeping and business analytics
• To manage payments and prevent fraudulent transactions
• To comply with any legal obligations or regulatory requirements
• To provide you with information about new services or promotions if you have opted in

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. The retention period may vary based on the type of data and applicable regulations. Typically, transaction and identity data are kept for a period of six years to comply with tax and accounting obligations. After this period, your data will be securely deleted or anonymized.

Processors and Data Sharing

We may share your information with selected third parties, known as data processors, only when necessary to fulfill our contract with you or to operate our business efficiently. Such processors may include:

• Payment processing providers for handling card payments or online transactions
• Delivery and courier companies to deliver your orders
• IT and website hosting service providers who manage our website and support our data infrastructure
• Professional advisors such as accountants or legal consultants (where required)

We require all third-party processors to respect the security of your personal information and to treat it in accordance with the law. They are not allowed to use your data for their own purposes and may only process your data for specified purposes in accordance with our instructions.

We do not sell, rent, or trade your personal information to any other parties for marketing purposes.

Data Security

We implement appropriate technical and organizational measures to safeguard your personal data and to prevent unauthorized access, loss, destruction, or disclosure. These include encryption protocols, secure servers, and regular monitoring of our systems. Despite our efforts, no security measure can guarantee absolute protection; however, we strive to protect your information to the highest possible standard.

Your Rights Under the GDPR

As a customer of Florist Belvedere, you are entitled to various rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any incomplete or inaccurate information we hold about you.
• Right to Erasure: In certain circumstances, you may request that we erase your personal data.
• Right to Restrict Processing: You may request that we suspend the processing of your personal data in certain scenarios.
• Right to Object: You can object to the processing of your data where we are relying on a legitimate interest or for direct marketing purposes.
• Right to Data Portability: You can request the transfer of your personal data to you or another service provider.
• Right to Withdraw Consent: Where you have provided consent to the processing of your personal data, you have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to file a complaint with the relevant data protection authority if you believe your rights have been infringed.

Policy Updates

We may update this Privacy Policy from time to time to ensure ongoing compliance with legal requirements and to reflect any changes to our practices. Any changes will be posted on this page, and we encourage you to review this policy regularly.

Contact, Queries and Exercising Your Rights

If you wish to exercise any of the rights described above or have any questions regarding this Privacy Policy or our data protection practices, please contact us using the details provided on our website or through the appropriate channels available at Florist Belvedere. We will respond to your request promptly and in accordance with applicable GDPR legislation.