Paper Seed Floristry (“we”, “us”) are committed to comply with the General Data Protection Regulation and the Data Protection Act 2018. This policy sets out the basis on which any personal information we collect from the client (“you”), and that you provide to us, will be processed. Paper Seed Floristry is the controller of the personal data collected meaning that we determine the purposes and way in which personal data are, or will be processed.
- The information we collect
In order for us to provide you with an effective service, it is necessary to obtain personal information which includes but not limited to; full name/s, address, telephone number, email address, and payment details.
Personal details are collected through:
Completing a contact form
Engaging with us on social media
Contacting us directly
Reviewing our products and services
Dealings with third parties who hold personal information on you where you have given permission for the third party to share these information with us
Any other relevant methods
- The use of collected information
When the appropriate information has been collected, the personal data you provide to us will be used to:
Offer a bespoke service
Fulfil a legal contractual agreement
Processing your order
Notify you of order status and any changes to our service
Using photographs for marketing purposes with your consent
Manage our business to provide you with the best service
Transfer your data to third party companies only when it is necessary to facilitate our services to you, such as our selected courier company and mail servers
Undertake our website personalisation
Fulfil statutory and legal requirements
We only share relevant information to third party companies only when it is necessary. All such providers are obliged to respect the confidentiality of the personal information shared with them.
- Retaining collected information
The length of time we retain your personal information is determined by a number of factors including the purpose of use and the legal requirements we need to fulfil. For this purpose, we will retain your personal information for 6 years after the date we have completed the purpose of use. Exceptions to the retention period are where:
The law requires us to retain or erase your personal information longer or shorter than the stated period
You exercise your right to erasure
It is required for any legal proceedings where we will retain your personal information until such proceedings have concluded and no further appeals are possible
- Your Rights
We have a legal obligation to ensure that personal information kept is secure, accurate and necessary; therefore you will need to inform us of any changes to your personal information so that it may be rectified. You have the right to request details of the information we hold about you, object to our processing of your personal information, and for your personal information to be erased by sending a written request via email to: firstname.lastname@example.org
Changes to this policy will be notified through updates on our website. If there are substantial changes to the way we use collected information, you will be notified through email or an announcement on the website.