Privacy Policy for Nautical Nectars
Nautical Nectars ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose information when you visit our site, use our online platform, or interact with our services. By using our services, you consent to the data practices described in this policy.
1. Information We Collect
We collect various types of information to provide and improve our services to you, including bespoke floral arrangements, event floristry, subscription services, botanical illustrations, map-themed floral creations, and corporate gifting.
1.1. Personal Data You Provide Directly to Us
When you engage with our services, you may provide us with personal data. This includes:
- Contact Information: Your name, email address, postal address, and telephone number, typically collected when placing an order, subscribing to our services, or contacting us for inquiries.
- Payment Information: Details necessary to process transactions, such as credit card numbers or other payment details. Please note, we do not store full credit card details on our servers; they are processed securely by third-party payment processors.
- Delivery Information: Names, addresses, and contact details of recipients for floral deliveries or other services.
- Order Details: Information related to your purchases, preferences for floral designs, event dates, and specific instructions for custom creations.
- Communications: Records of your correspondence with us, including emails, chat messages, and phone calls.
1.2. Data Collected Automatically (Cookies and Tracking Technologies)
When you visit our site, we may automatically collect certain information about your device and browsing activity. This includes:
- Device Information: IP address, browser type, operating system, unique device identifiers, and mobile network information.
- Usage Data: Information about how you interact with our site, such as pages visited, time spent on pages, links clicked, and referring URLs.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our site and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our services.
2. How We Use Your Information
We use the collected information for various purposes to provide and improve our bespoke floral artistry and cartographic design services:
- To Provide and Maintain Our Services: Fulfilling orders for floral arrangements, event floristry, subscription services, and custom botanical projects.
- To Process Transactions: Handling payments and ensuring smooth financial operations related to your purchases.
- To Deliver Products: Managing delivery logistics for flowers and other products to you or your designated recipients.
- To Communicate with You: Sending order confirmations, updates, customer service responses, and marketing communications about our products and services.
- To Personalise Your Experience: Tailoring our offerings and communications to your preferences, based on your past orders and interactions.
- For Internal Analytics and Improvement: Understanding how our site and services are used to enhance their functionality, design, and user experience.
- For Marketing and Promotional Purposes: With your consent, sending you information about new products, special offers, and events related to Nautical Nectars services.
- To Comply with Legal Obligations: Fulfilling our legal and regulatory requirements.
3. Legal Basis for Processing Personal Data (GDPR)
We only process your personal data when we have a valid legal basis to do so, as required by the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our legal bases include:
- Performance of a Contract: Processing necessary for providing the services you have requested, such as fulfilling an order for floral arrangements or a subscription service.
- Legitimate Interests: Processing necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights and freedoms. This includes improving our services, preventing fraud, and marketing our products.
- Consent: Where you have given explicit consent for us to process your data for a specific purpose, such as sending you marketing communications. You have the right to withdraw your consent at any time.
- Legal Obligation: Processing necessary to comply with a legal or regulatory obligation, such as tax laws or consumer protection laws.
4. Disclosure of Your Information
We may share your personal data with third parties in the following situations:
- Service Providers: We work with trusted third-party service providers who assist us in operating our business and providing services, such as payment processors, delivery services, IT and hosting providers, and marketing platforms. These providers are bound by contractual obligations to keep your personal data confidential and use it only for the purposes for which we disclose it to them.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as a business asset. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.
- Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
- With Your Consent: We may disclose your personal data to other third parties with your explicit consent.
5. Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, taking into account the type of data, the purpose for which it was collected, and our legal and regulatory obligations. For example, we retain order information for a certain period for accounting and tax purposes. When your personal data is no longer required, it will be securely deleted or anonymised.
6. Your Data Protection Rights (GDPR)
Under GDPR, you have certain rights regarding your personal data. These rights include:
- Right to Access: You have the right to request copies of your personal data that we hold.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure (Right to Be Forgotten): You have the right to request that we erase your personal data under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
- Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.
7. Security of Your Information
The security of your personal data is important to us. We implement appropriate technical and organisational measures designed to protect your personal data from unauthorised access, use, alteration, and disclosure. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
8. Links to Other Sites
Our site may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
9. Children's Privacy
Our services are not intended for anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
11. Contact Us
If you have any questions about this Privacy Policy, your data, or would like to exercise any of your data protection rights, please contact us:
- Company: Nautical Nectars
- Address: 7 The Royal Exchange, Threadneedle Street, City of London, London, EC3V 3DG, UK
This Privacy Policy was last updated on [Insert Date - e.g., 26th October 2023].