Chase Cross Florist GDPR Privacy Policy

Introduction

This Privacy Policy explains how Chase Cross Florist collects, uses, protects, and manages your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Chase Cross Florist from Chase Cross and the surrounding districts. We are committed to ensuring the privacy and security of your personal information throughout your experience with us.

What Data We Collect

When you place an order with Chase Cross Florist, we collect specific information necessary to provide our services efficiently and safely. This information may include:

  • Contact Information: Your full name, delivery address, billing address, and contact phone numbers.
  • Order Details: Contents of your order, special instructions, and recipient information when sending flowers to others.
  • Payment Information: Payment card details or transaction references (collected securely via our payment processors; card details are not stored by Chase Cross Florist).
  • Communication Records: Correspondence with us regarding orders, queries, or feedback.
  • Website Usage Data: Technical information such as IP address, browser type, and how you interact with our website (using cookies and similar technologies for site improvement and security).

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal information. Chase Cross Florist relies on the following lawful grounds:

  • Contractual Necessity: Processing your data is required to fulfill and deliver your order and provide related customer services.
  • Legal Obligations: We may be required to process or retain certain data to comply with applicable laws, such as tax and accounting regulations.
  • Legitimate Interests: We may process your data to improve our products and services, prevent fraud, maintain security, or handle customer feedback, which we believe does not override your fundamental rights and freedoms.
  • Consent: In some cases, such as for marketing communications, we will only use your data with your explicit consent. This consent can be withdrawn at any time.

How We Use Your Information

Your information is used strictly for:

  • Processing and completing your flower orders and delivery instructions.
  • Contacting you about your orders or to resolve any queries.
  • Maintaining accurate internal records for accounting, tax, and business needs.
  • Ensuring the safety and security of our services and website.
  • Sending direct marketing communications if you have given your explicit consent (you can opt out at any time).

Retention of Your Data

Chase Cross Florist will retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including for processing your orders, legal compliance, and resolving disputes. The standard retention periods are as follows:

  • Order records and related contact details: Retained for up to seven years to comply with tax and financial regulations.
  • Payment transaction data: Retained as per payment processor's guidelines; Chase Cross Florist does not store card details.
  • Marketing consent data: Retained until you withdraw your consent.
  • Technical and website usage data: Retained for a maximum of two years.

After these periods, your personal data will be securely deleted or anonymized unless further retention is required by law.

Our Data Processors

To provide our services, we work with trusted third-party service providers, also known as data processors, who assist us in specific operational tasks. We ensure that each processor complies fully with GDPR requirements and processes your data only as instructed by us. Examples of data processors we may use include:

  • Payment processing companies for secure handling of financial transactions.
  • IT and website hosting services to maintain the security and reliability of our platform.
  • Delivery couriers for fulfilling your floral orders.
  • Accounting and auditing service providers as required by law.

We do not sell or share your information with third parties for their independent marketing purposes.

Your Rights Under the GDPR

As a customer of Chase Cross Florist, you have several rights in relation to your personal data under the GDPR:

  • Right of Access: You may request a copy of any personal data we hold about you.
  • Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete information.
  • Right to Erasure ("Right to be Forgotten"): Subject to certain exemptions, you can ask for your data to be deleted.
  • Right to Restrict Processing: You may request us to limit the way we use your personal data.
  • Right to Data Portability: You may ask us to provide your data in a machine-readable format so it can be transferred to another provider.
  • Right to Object: You can object to the processing of your personal data, particularly where used for direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact methods available on our website or in store. We will respond to your request within one month, as required by law.

Data Security

We take data security seriously. All personal data is stored securely, with appropriate technical and organizational safeguards in place to protect against unauthorized access, alteration, or disclosure. Our staff are trained on data protection responsibilities, and we regularly review our security procedures.

Changes to This Policy

Chase Cross Florist may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. Updates will be posted on our website with the new effective date. We recommend checking this policy periodically to stay informed.

Contact Us

If you have any questions about how your data is handled, wish to exercise your rights, or have concerns about privacy at Chase Cross Florist, please contact us using the details provided on our website or inquire in person at our store.