Pimlico Florist Privacy Policy: Customer Data Protection

Introduction

This Privacy Policy explains how Pimlico Florist collects, uses, retains, and protects your personal data when you place orders with us, whether online, by phone, or in person. This policy applies to all customers who order from Pimlico Florist for delivery within Pimlico and surrounding districts. We are fully committed to complying with the EU General Data Protection Regulation (GDPR) and ensuring transparency about your rights and our practices.

What Data We Collect

When you place an order or interact with Pimlico Florist, we collect and process certain personal and transactional information. The types of data we may collect include:

• Contact Details: Name, delivery and billing address, telephone number(s), contact preferences.
• Order Information: Details of the products purchased, recipient information (name and address), your order instructions, and relevant delivery details.
• Payment Details: Payment card details and transaction records (note: card details may be processed directly by our payment processor and are not stored by us).
• Communication Records: Phone call notes, service request records, or messages sent to our customer service team.
• Website Usage Data: IP address, browser information, and interactions (such as pages visited), collected via cookies and analytics tools where you interact with our website.

Lawful Basis for Data Processing

Pimlico Florist processes your personal data under the following lawful bases, as recognized by GDPR:

• Contract: To fulfill your purchase and deliver the requested goods and related services, we must process your order information, contact details, and payment data.
• Legal Obligation: We retain financial records and transaction details as required by tax laws and regulations.
• Legitimate Interests: We process data to improve our services, ensure delivery accuracy, respond to customer queries, undertake fraud prevention, and maintain service security, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications, when applicable, we rely on your explicit consent, which can be withdrawn at any time.

Retention of Your Data

Pimlico Florist only keeps personal information for as long as necessary to fulfill the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. Order and transaction records are typically kept for up to 7 years to comply with financial recordkeeping obligations. Customer communication records and website usage data are routinely reviewed and either anonymized or securely deleted when no longer required, in accordance with GDPR principles.

Third-Party Processors

To provide our services efficiently, Pimlico Florist works with selected third-party processors. These entities process data on our behalf and under written contracts, in full compliance with GDPR. The main categories of processors we use include:

• Payment Service Providers: Secure payment gateways for processing card transactions.
• IT and Website Hosting Providers: Companies that maintain our website infrastructure, databases, and cloud services.
• Delivery Partners: Couriers or drivers for the purpose of delivering your orders.
• Customer Service Platforms: Tools that manage your communications with us and help us respond efficiently.
• Analytics Service Providers: Providers that help us understand website usage and improve user experience (data may be anonymized or pseudonymized where possible).

All processors are required to safeguard your data and may not use it for their own purposes.

Sharing Your Data

Pimlico Florist does not sell or rent your personal information to third parties. We only share your data externally when required for processing your order, complying with legal obligations, or protecting our rights and the safety of our customers. Customer data is not transferred outside the European Economic Area unless adequate safeguards are in place to protect your rights and privacy.

Your Rights Under GDPR

As a customer of Pimlico Florist, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Ask us to correct incomplete or inaccurate personal information.
• Right to Erasure ("Right to be Forgotten"): Ask us to delete your data when there is no compelling reason for its continued processing.
• Right to Restrict Processing: Limit the way we process your data in certain circumstances.
• Right to Data Portability: Request transfer of your data to you or a third party in a structured, commonly used, machine-readable format.
• Right to Object: Object to the processing of your data under certain circumstances, including for direct marketing purposes.
• Right to Withdraw Consent: Where you have provided consent, you may withdraw that consent at any time.

How to Exercise Your Rights

You can exercise any of your data rights by contacting Pimlico Florist using our standard communication channels. For your protection, we may need to confirm your identity before fulfilling your request. While most requests are processed free of charge, we reserve the right to charge a reasonable fee in cases of repetitive or unfounded requests as permitted by GDPR.

Updates and Changes to This Policy

We review our privacy policy regularly to maintain compliance and transparency. Any changes will be reflected in this document. Please check this policy whenever you place an order, as your continued use of our services constitutes acceptance of the latest version.

Contact and Complaints

If you have questions about this Privacy Policy or the way we handle your personal data, please contact us via our standard customer channels. If you are dissatisfied with our response or believe we are not processing your data lawfully, you have the right to lodge a complaint with your local Supervisory Authority for data protection matters.