Privacy Policy

By using our platform/s, you consent to the processing of your personal information as detailed here.

We highly value your privacy and are dedicated to safeguarding your personal information. Our commitment extends to providing an exceptional service and optimising your experience on our website.

For users under 18, kindly obtain permission from your parent or guardian before using our platforms or sharing your personal details.

We process all data in a manner that is reasonable, relevant, and purpose specific. When you register as a user on our website, we collect and process your data to provide services to you and/or your recipients. It is essential that the data you provide is accurate, current, and truthful, and does not misrepresent any individual or entity. The collected data includes, but is not limited to:

Full name
Email address/es
Physical address/es
Gender
Contact number
Online identifiers
Date of birth
Identification numbers
Recipient full name
Recipient email address/es
Recipient physical address/es
Recipient gender
Recipient contact number
Recipient date of birth
Message information
Product purchase history
Communicate with you to provide information, account queries, customer support, complaint resolution and quality control.
Internet log data via online identifiers, providing insights into the manner, timing, and duration of your platform usage, as well as the viewed content and submitted search queries
Details about the devices utilised to connect with our platforms, including device category, browsers, operating systems, and internet protocol addresses.
Precise geographic location, as derived from location-enabled services when accessing our platforms. This encompasses your device's coordinates and information concerning nearby Wi-Fi networks and cell towers.
- Additional data sourced from third-party entities, such as social media platforms.

Your personal information is collected in order for us to:

Identify you
Verify your identity
Create a user account for you and/or
Enter into a contract with you

As a registered user, we also process your information for the following purposes:

Fulfilling our contractual obligations when you place an order for delivery and/or returns processing
Providing information about our products and services upon request
Communicating with you to address queries, offer customer support, resolve complaints, and ensure quality control
Informing you of changes to our platforms, services, products, terms and conditions, privacy policy, notices, or any other alterations that impact our platforms, services, and products
Sending you information about competitions, occasions, reminders, services, or products that may be of interest (unless you have chosen not to receive such information)
Receiving feedback from you
Complying with legal or regulatory obligations
Conducting research for statistical purposes (without sharing your personal information)

We will retain your information for the following reasons:

To provide access to our platforms, products, or services
As required or permitted by law and in accordance with our internal retention policies
To uphold a contract between you and us
With your agreement to store your personal information, unless otherwise requested
As necessary to achieve the purpose for which the information was collected or processed

By accessing and/or using our platform/s, you consent to us retaining your personal information for no longer than necessary to achieve the purpose/s for which the information was initially collected or processed.

We employ various technological tools, such as cookies (text files placed on the device/s used to access our platform/s), and user tracking to enhance and personalise your experience on our website. By accessing and/or using our platform, you give consent for the use of cookies. Cookies are utilised to:

Enhance user-friendliness
Personalise interactions by tailoring services and platforms based on past purchases, interests, needs, and browsing history
Provide relevant advertising by limiting repetitive exposure and gauging ad effectiveness on our or other websites, informed by your website/app usage and viewed content
Send opt-in marketing communication if you are not a registered user.

You have the right to request that we no longer contact you for the purposes of direct marketing by any form of electronic communication, such as email, SMS or WhatsApp notifications by “opting out” of any direct marketing communications we may send to you.

With regards to emails:

To unsubscribe from all e-mails, please ensure you unsubscribe from each mailing list by clicking 'Unsubscribe' at the email's bottom.
Transactional Emails: Even though you may have unsubscribed from our mailing list, please note that when you place an order you will still receive emails of a transactional nature that are necessary for the successful completion of that order. Transactional emails are confirmations of the action and include purchase receipts, order confirmations, password resets, confirmations, and welcome emails to new subscribers.

Google Analytics Usage

We utilise Google Analytics as our analytics program to gather insights into user behaviour and improve our website's performance. Please be aware that when you visit our website, you may be tracked by Google's analytics program to enhance your browsing experience.

While your personal information will not be sold to any third parties, for marketing purposes or otherwise, we may provide your personal information to:

Our employees and/or third party service providers in order to enable them to assist us to interact with you via our platform/s for the ordering of goods or when delivering to you or a recipient on your behalf.
Law enforcement, government officials, fraud detection agencies or other third parties when necessary or appropriate when investigating potential fraud, intellectual property infringements or any other illegal activities that expose us to legal liability, financial loss, to report or support an investigation into suspected illegal activity.
Potential purchasers and/or professional advisors in the event of any reorganisation, merger, consolation, sale, joint venture, or other disposition of any/or all of our assets
Service providers who assist with our business operations. They may only use your personal information in connection with the services they perform and not for their own benefits, and must treat such information as confidential.
Our suppliers/delivery networks in order for them to liaise directly with you regarding your purchases/deliveries.

Your information is secured by taking appropriate, reasonable technical and organisational measures to prevent loss of, damage, unauthorised destruction, unlawful access to or processing of your personal information. In order to achieve this, our policies, controls and related processes are reviewed and updated regularly. This covers but is not limited to:

Physical, technical and network security
Access controls and monitoring of access
Secure storage, destruction and encryption
Personal information breach, reporting and remediation
By way of written agreements, imposition of security and confidentiality obligations on third parties who process personal information to render services to us

you have the right to:

View, correct, or amend your processed personal information via your user account on any of our platforms.
Acquire a record or description of your personal information, subject to an administrative fee. Requests may be refused if unfounded, excessive, or repetitive.
Seek correction, destruction, or deletion of your personal information.
Have your requests complied with unless legitimate reasons prevent us from doing so.
Receive information about changes impacting your personal data.
Obtain reasonable evidence of our compliance.
Be notified of unauthorised access to your personal information.
Lodge a complaint with the information regulator.

Our site's registration form requires you to give us your contact information, payment information, and demographic information.

The contact information we collect will be used to contact you to query or complete a delivery where the recipient cannot be found, or if further information may be required. This information is also used to send you regular news about updates to our website, promotional offers or special discounts. At any time you may choose not to receive these notices;

opt-out information

Financial information that is collected is used to bill you for products and services. Demographic and profile data is also collected on our website and may be used to tailor your visitors’ experience at our site, we are also able to customise and display the content according to your preferences.

Your IP address is used to help identify you and your shopping cart. Our site also uses cookies to keep track of your shopping cart and to deliver content specific to your interests.

Order Form

Information such as an occasion type (birthday, Mother's Day, etc.), products purchased, any relevant promotion or discount reference are also collected. The recipient's name, address and telephone number are also stored in an address book so that you don't have to re-enter their details when checking out. We also do this so that we can reach out to the recipient to rate their experience with us.

Order Surveys

We strive to provide world-class customer service at all times and to ensure that our website and product range continues to meet your needs. In order to assist us with measuring how well we are achieving these goals we may from time to time ask for your feedback in the form of an online survey.

Our online surveys may ask for additional contact or demographic information as well as your preferences on certain topics/product categories.

This website uses Google AdWords

This website uses the Google AdWords remarketing service to advertise on third party websites (including Google) to previous visitors to our site. It could mean that we advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits to the Oxford & Rose website. Of course, any data collected will be used in accordance with our own privacy policy and Google’s privacy policy.

You can set preferences for how Google advertises to you using the Google Ad Preferences Page, and if you want to you can opt out of interest-based advertising entirely by cookie settings.

This website uses Facebook Ads

This website uses the Facebook remarketing service to advertise to previous visitors to our site on Facebook and its partner sites. This could mean that we advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on either Facebook or any of its partner sites (e.g. Instagram). Any data collected will be used in accordance with our own privacy policy and Facebook’s privacy policy.

GDPR Compliance

Definitions:

“The Company”: Means Oxford and Rose Ltd.

“You”: Means the person, business, organisation, employees (Both of Oxford & Rose and other identifiable persons), Directors, Board Members and other beneficiaries of here listed persons.

“Data Subject”: Means the person to whom personal information relates.

‘‘Person’’: Means a natural person or a juristic person.

‘‘Consent’’: Means any voluntary, specific and informed expression of will in terms of which permission is given for the processing of personal information.

‘‘Electronic communication’’: Means any text, voice, sound or image message sent over an electronic communications network which is stored in the network or in the recipient’s terminal equipment until it is collected by the recipient.

‘‘Personal information’’: Means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:

information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
information relating to the education or the medical, financial, criminal or employment history of the person;
any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
the biometric information of the person;
the personal opinions, views or preferences of the person;
correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
the views or opinions of another individual about the person; and
the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person;

Introduction:

Information privacy is an ongoing responsibility, and will be updated from time to time update as we undertake new personal data practices or adopt new privacy policies. Where we do so, we will take appropriate steps to bring the amendment to your attention

We take the protection of your personal information seriously and has appropriate technical and organisational measures and policies in place to secure your information and to protect it against unauthorised or unlawful use and accidental loss or destruction. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will only do so in an authorised manner and are subject to a duty of confidentiality. All staff of the Company are made aware of their information security responsibilities.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

What we need

We can act as a data controller and/or data processor of the personal data you (the data subject) provide us. We collect the following types of personal data from you:

names, title, email addresses, physical addresses, phone numbers, date of birth etc;
personal identifiers such as your ID number, national insurance number, tax number, Passport number or similar;
additional information you provide to us in the course of your dealings with us or which we require to provide you with Oxford & Rose's product and services.

The data that is collected that personally identifies you comes from:

the mandates or other materials you submit to us during the course of your relationship with Oxford & Rose;
your business dealings with Oxford & Rose, including via email, telephone or as stated in our mandates with you;
third parties who are needed in order to provide a product or service and/or where mandated by you
recording and monitoring tools that we may use for compliance, monitoring and/or providing a product or service

In limited cases, we also collect what is known as “special categories” of information.

Where we process “special categories” of information about you, we do so either because you have given us your explicit consent, we are required by law to do so, or the processing is necessary for the establishment, exercise or defence of a legal claim.

How do we collect your information?

To the extent permissible under applicable law, we collect information about you and any other party whose details you provide to us when you:

register to use our websites, applications or services (including free trials); this may include your name (including business name), address, email address and telephone number. We may also ask you to provide additional information about your business and your preferences;
complete online forms (including call back requests), take part in surveys, post on our message boards, post any blogs, enter any competitions or prize draws, download information such as white papers or other publications or participate in any other interactive areas that appear on our website or within our application or service;
interact with us using social media;
provide your contact details to us when registering to use or accessing any websites, applications or services we make available or when you update those details; and
contact us in the normal course of business in providing a product or service. For example by telephone, fax, SMS, email or post.

What do we do with your information?

When you interact with our site, as part of the online communication process, or in the normal course of business where we are required to have specific personally identifiable information in order to provide a product or service, we collect the personal information you give us such as your name, address and email address.

When you browse our site, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. You may also be tracked through the use of cookies. We employ various technological tools, such as cookies (text files placed on the device/s used to access our platform/s), and user tracking to enhance and personalise your experience on our website. By accessing and/or using our platform, you give consent for the use of cookies. Cookies are utilised to:

Enhance user-friendliness
Personalise interactions by tailoring services and platforms based on past purchases, interests, needs, and browsing history
Provide relevant advertising by limiting repetitive exposure and gauging ad effectiveness on our or other websites, informed by your website/app usage and viewed content
Send opt-in marketing communication if you are not a registered user.

Email Marketing

With your permission and where applicable, we may send you emails about our site, new services, company and other updates.

To the extent permissible under applicable law, we use your information to:

provide any information and services that you have requested
manage our relationship with you (for example, customer services and support activities);
monitor, measure, improve and protect our content, website, applications and services and provide an enhanced, personal, user, experience for you;
undertake internal testing of our website, applications, systems and services to test and improve their security and performance. In these circumstances, we would anonymise any information used for such testing purposes;
provide you with any information that we are required to send you to comply with our regulatory or legal obligations;
detect, prevent, investigate or remediate, crime, illegal or prohibited activities or to otherwise protect our legal rights (including liaison with regulators and law enforcement agencies for these purposes;
contact you to see if you would like to take part in our customer research (for example, feedback on your use of our applications, products and services);
monitor, carry out statistical analysis and benchmarking, provided that in such circumstances it is on an aggregated basis which will not be linked back to you or any living individual;
deliver targeted advertising, marketing (including in-product messaging) or information to you which may be useful to you, based on your use of our applications and services;
deliver joint content and services with third parties with whom you have a separate relationship (for example, social media providers); and

How long do we keep it?

We will retain your personal information for as long as required for us to perform the Services and/or carry out the purposes for which the data was collected or perform investigations in relation to the data depending on the legal basis for which that data was obtained and/or whether additional legal/regulatory obligations mandate that the Company retains your personal information.

How long do we keep it?

Data Minimisation

We strive to only collect the data required to provide a product or service. In general, only data needed for this purpose will be collected, stored and processed.

How do you get my consent?

When you provide us with personal information to contact us via one of our online touch points (such as a web form, lead form, social lead), we imply that you consent to our collecting it and using it only for the reason for which you sent us your information.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

Additionally, we collect usage data using cookies on our site. Please read more here on Cookies and consent

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time.

Third-Party Services

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

In the event that the third-party provider is prescribed by you, we suggest that you make yourself familiar with the third-party service provider’s privacy policy and ensure that any required compliance and regulations are met.

When the third-party provider forms part of our normal business processes, we will endeavour to ensure compliance by said Third party providers where personal information is shared between the businesses and/or systems in place.

We may share your information with third-party platform providers (such as Facebook, Google and Twitter) to serve targeted advertising/content to you via the relevant third-party platform based on your profile/interests. Your information is used by the third-party platform provider to identify your account and serve advertisements to you. You can control what advertisements you receive via the privacy settings on the relevant provider’s platform, and you should consult the third-party’s help/support centre for more information. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Links

When you click on links on our site, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

What are your rights?

You may have the following rights under data protection laws:

Right of subject access: the right to make a written request for details of information about you held by the Company and a copy of that information.
Right to rectification: the right to have inaccurate information about you rectified. You must provide any relevant updates to your personal data held by the Company promptly to ensure its accuracy.
Right to erasure ('right to be forgotten'): the right to have certain information about you erased.
Right to restriction of processing: the right to request that your information is only used for restricted purposes.
Right to object: the right to object to the use of your information, including the right to object to marketing.
Right to withdraw consent: the right to withdraw any consent you have previously given us to handle your information. If you withdraw your consent, this will not affect the lawfulness of the Company’s use of your information prior to the withdrawal of your consent.

These rights are not absolute: they do not always apply, and exemptions may be engaged. We may, in response to a request, ask you to verify your identity and to provide information that helps us to understand your request better. If we do not comply with your request, we will explain why. To exercise any of these rights, or if you have any other questions about our use of your information, please contact us at informationofficer@netflorist.co.za.

In the event that you wish to complain about how we have handled your personal data, please contact our information officer. We hope that our Data Privacy Manager can resolve any query or concern you raise about our use of your information. If not, you have a right to submit a complaint to the Regulator regarding the alleged interference with the protection of the personal information of any data subject.