Tooting Flowers Privacy Policy

Scope of Our Privacy Policy

This Privacy Policy explains how Tooting Flowers collects, uses, protects, and retains your personal data when you place orders with us in Tooting and the surrounding districts. Our commitment to compliance with the General Data Protection Regulation (GDPR) means you can shop and order with confidence that your data is managed lawfully and transparently.

What Data Do We Collect?

When you place an order or interact with Tooting Flowers, we may collect the following types of personal information:

• Identification information: Your full name.
• Contact information: Delivery address, billing address, and telephone number.
• Order details: Products ordered, messages for recipients, preferences, special instructions.
• Payment information: Payment confirmation details. (Note: we do not directly process or store your full card details; these are handled by secure third-party payment processors.)
• Communications: Correspondence and communication preferences when you contact us regarding orders or support.
• Technical data: IP address, browser type, device information, and cookies (only as strictly necessary for functioning of our website and order processing).

Lawful Basis for Processing Your Data

Tooting Flowers processes your personal data only when permitted by GDPR. The lawful bases under which we process your data include:

• Contract: We require your information to process and fulfill your order, provide customer service, and deliver your flowers to the intended address.
• Legal obligations: When necessary to comply with legal or regulatory requirements, such as tax and accounting rules.
• Legitimate interests: To improve our services, prevent fraud, and ensure the security of our operations, provided these interests are not overridden by your privacy rights.
• Consent: Where we seek to send you marketing communications beyond your current order, we will rely on your explicit consent, which you may withdraw at any time.

Purpose of Data Collection and Use

We collect and use your data to:

• Process, fulfill, and deliver your order accurately and efficiently.
• Handle payments securely via our appointed payment processors.
• Communicate with you about your order status, updates, and delivery.
• Respond to your enquiries, requests, and complaints promptly.
• Improve our product offerings and services based on your feedback.
• Comply with legal and accounting obligations.

Your data will not be used for automated procedures or profiling without your knowledge and explicit consent.

How Long Do We Keep Your Data?

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, and to satisfy any legal, accounting, or reporting requirements. Typically, order and transaction details are kept for 6 years from the end of the relevant financial year to comply with statutory obligations. If you have an ongoing customer relationship with Tooting Flowers, relevant data will be retained for as long as necessary to maintain that relationship, or until you request its deletion (subject to our legal requirements). Technical and cookie data is retained only for the minimum period necessary to ensure website functionality.

Who Has Access to Your Data?

Your information will be accessed only by trained and authorized staff who require access to process your order or to handle your queries. In order to fulfill orders and operate our services, your data may be shared with third parties acting as Data Processors, including:

• Payment processors: Secure third-party companies handling card and online payments.
• Delivery partners or drivers: For order delivery to your specified recipient.
• IT service providers: For secure hosting and safe operation of our website and order management systems.

We require that all Data Processors operate with appropriate data security and in full compliance with GDPR. Outside these circumstances, we do not share your data with other third parties for marketing or other unrelated purposes. Your personal data is not transferred outside the UK or European Economic Area without additional safeguards.

Your Rights Under GDPR

Under GDPR, you have clear rights regarding the personal data we hold about you. You may exercise the following rights at any time:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction or completion of inaccurate or incomplete information.
• Erasure: Request deletion of your data when no longer necessary or when legally permissible.
• Restriction: Request that we restrict how we process your information, under certain circumstances.
• Objection: Object to certain types of processing, such as direct marketing.
• Portability: Request that we transfer your data to another service provider, where technically possible.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of your rights, please contact us using our usual communication channels. We may ask for additional identification to confirm your identity before fulfilling your request. We will respond as quickly as possible within legal timeframes.

How We Protect Your Data

Tooting Flowers takes your privacy and data security seriously. We implement technical and organizational measures designed to protect your data from unauthorized access, loss, alteration, or disclosure. These measures include encrypted transmissions, restricted access to personal data, staff training, and regular security reviews of our systems and procedures. Although we work to maintain robust protections, no method of electronic transmission or storage is fully secure. We therefore keep our practices under constant review to adapt to emerging risks and strengthen your privacy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal obligations. All changes will be effective once they are posted on our website. We encourage you to review this policy periodically whenever you place an order or interact with our services to remain informed about how your data is protected.

Questions and Contact

If you have any concerns or questions about this Privacy Policy or how your data is managed at Tooting Flowers, please contact us using our available customer service channels. We are committed to resolving your queries and safeguarding your privacy as you place orders in Tooting and the surrounding districts.