Florist Longford Privacy Policy

Introduction

This Privacy Policy explains how Florist Longford collects, uses, and protects the personal data of customers who place orders from Longford and surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal information is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable laws. By placing an order with Florist Longford, you acknowledge and accept the practices described in this policy.

What Data We Collect

To fulfil your orders and provide a seamless customer experience, Florist Longford may collect the following categories of personal data:

• Contact information: Name, delivery address, billing address, and contact telephone numbers.
• Order details: Information about your purchases, message cards, and delivery instructions.
• Payment data: Transaction details (payment provider, method, amount) collected and processed securely via our payment processors. Florist Longford does not store your complete card information.
• Communication: Correspondence between you and Florist Longford, including queries, feedback, and complaint details.
• Technical data: Information about how you use our website, such as IP address, browser type, device, and cookies, as applicable.

Lawful Basis for Data Processing

Florist Longford processes your personal data according to the following lawful bases, as defined under the GDPR:

• Contractual necessity: We require certain personal data to process and fulfil your flower order, deliver products, and communicate necessary order updates.
• Legal obligation: Data may be processed to comply with applicable legal and tax obligations.
• Legitimate interests: We may use data for business administration, to improve our products and services, and to prevent fraud, provided these interests are not overridden by your rights and freedoms.
• Consent: If you consent to marketing or promotional communications, your data will be used for this purpose. Consent can be withdrawn at any time.

How We Use Your Personal Data

Personal data is used only for the purposes for which it is collected, including:

• Processing, fulfilling, and delivering your orders.
• Communicating order confirmations, dispatch, or delivery updates.
• Managing payments and refunds securely.
• Responding to your queries and customer service requests.
• Improving our services based on customer feedback and website analytics.
• Fulfilling legal record-keeping requirements.
• Sending marketing communications, where you have opted in.

Data Retention

Florist Longford retains personal data only for as long as necessary for the fulfilment of the purposes outlined in this policy, or as required to comply with legal, regulatory, or accounting obligations. Specifically:

• Order and transaction information is retained for up to seven years for financial and tax records, in line with legal requirements.
• Customer service correspondence is typically retained for up to two years from the end of customer contact, unless otherwise required for the resolution of ongoing issues.
• Marketing preferences and consent records are maintained until you withdraw consent or request erasure.
• At the expiry of retention periods, your data is securely deleted or anonymised.

Data Sharing and Processors

Your personal data will only be shared with trusted third-party processors when necessary to fulfil your order or comply with legal obligations. The main categories of third parties include:

• Payment processors: To enable secure card and online transactions.
• Delivery and courier services: To deliver your flowers and gifts to the recipient's address.
• IT service providers: For secure web hosting and storage solutions.
• Professional advisors: Such as accountants or legal professionals, where legally required.

All third-party processors are bound by contractual obligations to process your personal data securely and only according to our instructions. Personal data is not sold or shared for unrelated marketing purposes.

International Data Transfers

Florist Longford seeks to ensure your data remains within the European Economic Area (EEA); should transfer outside the EEA be necessary (for example, with a service provider operating internationally), such transfers are made in compliance with GDPR requirements, ensuring appropriate safeguards such as Standard Contractual Clauses or equivalent.

Data Security

We implement appropriate technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure, or loss. This includes restricted access, encrypted data storage, and regular reviews of our data handling practices.

Your Rights Under GDPR

As a customer ordering from Longford or surrounding districts, you have the following rights regarding your personal data under the GDPR:

• Right of access: Request access to your personal data held by Florist Longford.
• Right to rectification: Request correction of incomplete or inaccurate data.
• Right to erasure: Request deletion of your data, subject to legal retention requirements.
• Right to restrict processing: Request restriction of your data processing under certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used format and transmit it to another service provider.
• Right to object: Object to data processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw your consent to marketing communications at any time.

Exercising Your Rights

If you wish to exercise any of the rights mentioned above, please contact us using the details provided on our website. We will respond to requests in accordance with GDPR and applicable laws. You may also have the right to lodge a complaint with the appropriate data protection supervisory authority if you believe your data has been mishandled.

Policy Changes

We may update this Privacy Policy from time to time. Any changes will be effective when posted on our website, and we encourage you to review this policy regularly to stay informed of how we handle your personal data.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or your personal data, please refer to the contact information on our website for assistance.