Privacy Policy for Flowers Mitcham Orders

Introduction

This Privacy Policy explains how Flowers Mitcham collects, uses, stores, and shares your personal data when you place orders with us, whether you are from Mitcham or the surrounding districts. We are committed to safeguarding your privacy and upholding our responsibilities under the General Data Protection Regulation (GDPR). Please read this policy carefully to understand how we handle your information and the choices available to you regarding your personal data.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Flowers Mitcham, including those using our website, by phone, or in person, when the order is for delivery in Mitcham and surrounding districts. By placing an order, you agree to the terms described in this policy.

Personal Data We Collect

When you interact with Flowers Mitcham or place an order, we may collect the following types of personal data:

• Contact Information: Your full name, delivery address, and billing address.
• Order Information: Details about your order, including flower selections, special messages, delivery preferences, and payment status.
• Payment Data: If you pay online or by phone, limited payment information (such as the last four digits of your card number or transaction reference number) is processed via our payment processors. We do not store full payment card details.
• Communication Records: Records of email or telephone correspondence relating to your orders, inquiries, feedback, or complaints.
• Technical Data: Limited information about your use of our website, such as your IP address, browser type, and device information, collected via cookies or analytics tools for site function and security.

Lawful Basis for Processing Your Data

In accordance with GDPR, we process your personal data using the following lawful bases:

• Contractual Necessity: We process your data to fulfill your flower orders, supply related services, and communicate with you about your order status. Without this data, we would be unable to provide our services.
• Legal Obligation: To comply with applicable law, such as retaining records for tax or accounting purposes.
• Legitimate Interests: For business administration, order management, customer service improvements, and fraud prevention, provided these interests are not overridden by your rights or interests.
• Consent: In specific situations (for example, if you sign up for marketing communications), we will rely on your consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is used to process orders, deliver flowers, provide customer support, confirm bookings, manage delivery logistics, handle payments, and respond to your queries. We may also use de-identified information for analytical purposes to improve our services, but this data cannot identify individuals.

Data Retention

We retain personal data only as long as necessary for the purposes set out above, or as required by law. Typically, order and transaction details are kept for up to 7 years to comply with accounting and tax obligations. Communication records are retained for up to 2 years after your last interaction unless ongoing legal or customer service requirements apply. When your data is no longer needed, it will be securely deleted or anonymised.

Processors and Data Sharing

We use carefully selected third-party service providers ("processors") who assist us in providing our services. Categories of processors may include payment gateways, delivery partners, IT hosting providers, and analytics platforms. All such processors are contractually required to protect your information and process it only according to our instructions in compliance with GDPR. We do not sell your personal data to third parties. If required by law or in connection with regulatory obligations, we may disclose certain data to competent authorities.

Your Rights Under GDPR

As a customer in Mitcham and surrounding districts, you have the following rights regarding your personal data under GDPR:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct or update your information if it is inaccurate or incomplete.
• Right to Erasure: Request that your data be deleted in certain circumstances, such as if it is no longer necessary for the purposes collected.
• Right to Restrict Processing: Ask us to temporarily restrict the processing of your personal data in specific situations.
• Right to Data Portability: Receive your data in a commonly used and machine-readable format, and/or request that we transfer it to another data controller, where applicable.
• Right to Object: Object to processing of your data under certain conditions, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time, without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: If you have concerns about how your data is handled, you may contact the relevant supervisory authority in your jurisdiction.

If you wish to exercise any of these rights, please contact us using the contact information available on our website or in-store. We may require proof of identity before acting on your request to ensure the privacy and security of your data.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful loss, destruction, or damage. Access to your information is limited to those employees, agents, and processors who need it to fulfil their duties and provide our services to you. All such parties are bound by confidentiality obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, operational practices, or legal requirements. Significant changes will be communicated appropriately, and the latest version will always be available on our website or in store. Your continued use of our services constitutes acceptance of the updated Privacy Policy.

Contact and Queries

If you have questions or concerns about how Flowers Mitcham manages your personal data, or to exercise your rights, please use the contact details provided on our website or ask staff in store. We encourage you to contact us so that we can address any queries promptly and transparently.