Florist Waterloo Privacy Policy
Introduction
This Privacy Policy explains how Florist Waterloo collects, uses, manages, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all individuals who place flower orders with Florist Waterloo from Waterloo and surrounding districts. We are committed to respecting your privacy and ensuring that your personal data is processed lawfully, transparently, and securely.
What Data We Collect
Florist Waterloo collects only the data necessary to fulfil your orders and provide our services. The types of data we may collect include:
- Personal Identification Information: Full Name, Delivery Address, Billing Address
- Contact Information: Phone Number, Email Address
- Order and Delivery Details: Order History, Delivery Instructions, Recipient Name and Address
- Payment Information: Although payments are processed via third-party providers (see Processors section), we may receive confirmation of payment but do not store your payment card details
- Communication Records: Details of correspondence you have with us regarding your order
- Technical Data: IP addresses, device types, and browsing activity collected via cookies or analytics for service improvement (where applicable)
Lawful Basis for Processing
Under the GDPR, we must have lawful grounds for processing your personal data. Florist Waterloo processes data based on the following legal bases:
- Contractual Necessity: To process, deliver, and manage your flower order
- Legal Obligation: To comply with legal and tax requirements related to our services
- Legitimate Interests: To improve our services, respond to enquiries, and prevent fraud, provided your interests and rights do not override these interests
- Consent: When you opt into marketing communications or cookies, we seek your explicit consent, which you may withdraw at any time
How We Use Your Data
Florist Waterloo uses your personal information for the following purposes:
- Processing and delivering your flower order
- Communicating with you regarding your order status or any relevant updates
- Improving our products, services, and customer experience
- Meeting legal, accounting, and regulatory obligations
- Sending you marketing communications if you have consented
Data Retention
Florist Waterloo retains your personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Typically:
- Order information and transaction records are retained for 6 years to comply with statutory requirements
- Contact and delivery details are stored only as long as needed to manage current or recurring orders
- Marketing communication data is held until you opt-out or withdraw your consent
- Technical logs and cookies are retained in accordance with our cookie management policy and applicable laws
After the retention periods expire, we securely delete or anonymize your data.
Processors and Sharing of Data
To provide and improve our services, we may share your personal data with:
- Payment Processors: Third-party companies securely process your payments. We receive confirmation of successful transactions but do not store payment card details ourselves.
- Delivery Partners: If third parties are involved in the delivery process, your name, delivery address, and relevant order information may be shared with them to ensure successful fulfilment.
- IT Service Providers: Providers that host or maintain our website and systems may process data on our behalf under strict GDPR-compliant agreements.
- Regulatory Authorities: Where required by law, we may disclose information to authorities, such as for fraud prevention or tax reporting.
All third parties acting as processors are contractually bound to protect your data in accordance with GDPR.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You may request details of your personal data that we hold.
- Right to Rectification: If your data is inaccurate or incomplete, you may ask us to correct or update it.
- Right to Erasure: You can request erasure of your data where there is no legitimate reason for its continued processing.
- Right to Restrict Processing: Under certain circumstances, you can limit the ways we use your data.
- Right to Data Portability: You may request a copy of your data in a structured, machine-readable format transmitted to another provider.
- Right to Object: You may object to the processing of your data for certain purposes, including marketing.
- Right to Withdraw Consent: You may withdraw consent at any time, though this does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority if you believe your rights have been infringed.
Protecting Your Data
Florist Waterloo takes appropriate technical and organisational measures to safeguard your personal data and protect it against loss, misuse, unauthorized access, disclosure, or alteration. We regularly review our security protocols and train staff to handle information responsibly and securely.
Policy Scope
This policy applies to all personal data processed by Florist Waterloo customers who place orders from Waterloo and surrounding districts. Our website and services are not intended for children, and we do not knowingly collect personal data from individuals under the age of 16.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or service improvements. Significant changes will be communicated through appropriate channels. Please review this policy periodically to stay informed about how Florist Waterloo safeguards your information.
Contact & Further Information
If you have questions or concerns about this Privacy Policy or how your data is handled, please use the contact options provided on our website. We aim to address any requests or enquiries relating to your privacy rights promptly and transparently.