Privacy Policy for Russet Petals
At Russet Petals, we are committed to protecting the privacy and personal data of our customers, website visitors, and anyone who interacts with our services. This Privacy Policy outlines how we collect, use, store, and disclose your information when you engage with our floristry and botanical arts services, including bespoke floral arrangements, wedding floristry, corporate subscriptions, workshops, artisanal potted plants, dried flower art, and delivery services. We adhere to the General Data Protection Regulation (GDPR) and other applicable data protection laws in the UK.
1. Information We Collect
We collect various types of information to provide and improve our services, including:
- Personal Identification Information: This includes your name, email address, postal address (for delivery and billing), phone number, and any other information you provide when placing an order, booking a workshop, subscribing to our services, or contacting us.
- Recipient Information: If you send flowers or gifts to someone else, we collect the recipient's name, address, and contact details to ensure successful delivery. We assume you have obtained the recipient's consent before providing their details to us.
- Payment Information: When you make a purchase, we collect payment details such as credit/debit card numbers. However, these are processed securely by third-party payment processors, and we do not store full payment card details on our servers.
- Communication Data: Records of your correspondence with us, including emails, phone calls, and messages through our online platforms.
- Website Usage Data: Information about how you interact with our site, such as your IP address, browser type, operating system, referral sources, pages viewed, and the dates/times of your visits. This helps us understand how our online platform is used and how we can improve it.
- Workshop and Event Details: Information related to your participation in our workshops or events, including dietary restrictions (if applicable and relevant to the event), special requests, and attendance records.
2. How We Use Your Information
We use the collected information for various purposes, primarily to fulfil our services and improve your experience with Russet Petals:
- To Provide Services: Processing and fulfilling your orders for floral arrangements, plants, and dried flower art; managing wedding and event flower commissions; administering corporate flower subscriptions; and facilitating workshop bookings and attendance.
- Communication: To communicate with you regarding your orders, appointments, enquiries, and to provide customer support.
- Marketing: With your consent, to send you updates, promotional materials, newsletters, and information about new products, services, or events that may be of interest to you. You can opt out of these communications at any time.
- Website Improvement: To analyse website usage and performance, diagnose technical issues, and improve the functionality and user experience of our online platform.
- Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.
3. Legal Basis for Processing
Our legal bases for processing your personal data include:
- Contractual Necessity: Processing data needed to fulfil our contract with you (e.g., fulfilling an order, providing a service).
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., for marketing communications). You can withdraw your consent at any time.
- Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., for fraud prevention, improving our services).
- Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our business and providing our services (e.g., payment processors, delivery companies, website hosting, analytics providers). These service providers are contractually bound to protect your data and only use it for the purposes for which we disclose it to them.
- Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction, provided the acquiring entity adheres to similar privacy practices.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. This includes using secure servers, encryption, and access controls. While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure.
6. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability: You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided below.
8. Cookies
Our online platform uses "cookies" to enhance your experience. Cookies are small data files placed on your device. We use them for purposes such as remembering your preferences, analysing site traffic, and for advertising. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our online platform may become inaccessible or not function properly.
9. Third-Party Websites
Our online platform may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Russet Petals
14 Regent Terrace, Floor 1
Edinburgh, EH7 5BL, UK
Date last updated: 23/07/2024