Florist Stamford Hill Privacy Policy

Scope of This Privacy Policy

This Privacy Policy applies to all customers placing orders with Florist Stamford Hill from Stamford Hill and the surrounding districts. We are committed to processing your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. This document explains how we collect, use, store, and protect your data, as well as your rights relating to your personal information.

What Personal Data We Collect

When you place an order or interact with Florist Stamford Hill, we may collect and process the following categories of personal data:

  • Identity Data: Full name, title, and, where applicable, delivery recipient name.
  • Contact Information: Delivery address, billing address, and phone number (for confirming orders and coordinating deliveries).
  • Order Information: Details of your order, messages or notes for recipients, and purchase history.
  • Payment Data: Payment method details (e.g., last four digits of credit card), though we do not store complete financial details. Payment is processed securely via third-party providers.
  • Correspondence: Any communications between you and Florist Stamford Hill, including messages, queries, or complaints.
  • Technical Data: Information relating to your device and how you use our website, such as IP address and browser type. This is collected via cookies, if consented to.

Lawful Basis for Processing Personal Data

Florist Stamford Hill collects and uses your personal data under the following lawful bases as defined by the UK GDPR:

  • Contractual Necessity: We process your information to enter into or fulfil the contract of sale and delivery of flowers or related products you place with us.
  • Consent: In some cases, such as for optional marketing communications or use of non-essential cookies, we will ask for your explicit consent.
  • Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services, addressing your enquiries, or for record-keeping, provided these interests do not override your data protection rights.
  • Legal Obligations: We may process your personal data to comply with legal or regulatory obligations, such as record-keeping for tax purposes.

How We Use Your Personal Data

We may use your personal data for purposes including:

  • Processing and fulfilling your orders, including delivery to you or your chosen recipient.
  • Managing payments and preventing fraudulent transactions.
  • Contacting you with order updates or important information related to your purchase.
  • Responding to your enquiries or handling complaints.
  • With your consent, sending you special offers or marketing communications.
  • Improving our services and user experience.

Data Retention Policy

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, this means we will keep your order and contact information for up to seven years from the date of your last order, in line with UK tax laws and for legitimate business reasons. After this period, your personal data will be securely deleted or anonymised.

Personal Data Processors and Third Parties

Your personal data may be shared with trusted third-party service providers ("processors") who assist us in delivering our services, such as:

  • Payment processing companies for secure handling of transactions.
  • Delivery and courier firms for fulfilling your delivery orders.
  • IT and cloud service providers to manage our website and databases.

These processors are contractually bound to safeguard your information and only process data as instructed by Florist Stamford Hill. We do not sell or rent your personal data to third parties for marketing purposes.

Your Data Protection Rights

Under the UK GDPR, you have the following rights in respect of your personal data:

  • Right to Access: You can request a copy of your personal data held by Florist Stamford Hill.
  • Right to Rectification: You can ask us to correct or update any inaccurate or incomplete personal information.
  • Right to Erasure: In certain circumstances, you can request that we delete your personal data.
  • Right to Restriction: You can request that we restrict the processing of your personal data in specific situations.
  • Right to Object: You can object to our processing of your personal data where we rely on legitimate interests or for direct marketing purposes.
  • Right to Data Portability: You can ask for your information to be provided in a structured, commonly-used and machine-readable format.
  • Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, you are invited to contact us using the contact form provided on our website. We may need to verify your identity before processing your request.

How We Protect Your Data

Florist Stamford Hill implements robust security measures to protect your personal data from unauthorised access, use, or disclosure. This includes secure transmission of data, restricted access to processing systems, and regular staff training on data protection principles.

Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in law or our practices. The updated policy will be made available on our website with a revised "last updated" date.

Questions and Complaints

If you have any questions about this policy or how we handle your personal data, please contact us via our online contact form. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you feel your rights have been infringed.