Florist Finsbury Park Privacy Policy

Introduction

Florist Finsbury Park is committed to safeguarding the privacy of all individuals who order from us in Finsbury Park and surrounding districts. This Privacy Policy explains what personal data we collect, the reasons for collecting it (our lawful basis), how long we keep it, who processes it on our behalf, and what rights you have in relation to your data. We comply with the UK General Data Protection Regulation (GDPR) and relevant UK data protection laws.

Scope of This Policy

This policy applies to all customers placing Florist Finsbury Park orders for delivery or collection within Finsbury Park and the neighbouring districts. By placing an order with us, you acknowledge that you have read and understood this Privacy Policy and that your data will be processed as described herein.

What Personal Data We Collect

We collect the following categories of personal data when you interact with Florist Finsbury Park:

• Contact Information: Name, address, telephone number, and delivery address.
• Order Details: Details of the items you purchase, delivery instructions, sender and recipient information.
• Payment Information: Payment transaction details (processed by secure third-party payment providers; we do not store full payment card numbers or security codes).
• Communication Information: Records of correspondence with us (for example, feedback, complaints, or queries, which may be stored if provided through contact forms or by phone).
• Technical Data: IP address, device type, browser type, and other related metadata collected through our website for security and analytical purposes.

Lawful Basis for Processing

We process your personal data under the following lawful bases as outlined in Article 6 of the GDPR:

• Contract: Processing your information is necessary to fulfil our contract with you (for example, to process and deliver your order, and handle payments).
• Legal Obligation: We may be required to process your data to comply with tax, accounting, or other legal responsibilities.
• Legitimate Interests: We may process data where it is necessary for our legitimate interests, such as improving our services, ensuring site security, or understanding how our customers use our website, provided your interests and rights do not override these.
• Consent: If we ever seek to use your data for marketing communications or other purposes not directly related to your order, we will do so only with your explicit consent. Consent can be withdrawn at any time.

Purpose of Processing Your Data

The main purposes for which we process your data are:

• Processing and delivering your order.
• Providing updates and customer support regarding your delivery.
• Complying with legal and financial record-keeping requirements.
• Improving our website, services, and customer experience.
• Preventing fraud and maintaining the security of our systems.
• Sending marketing communications (only where you have explicitly opted in).

Retention Periods

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally:

• Order and transaction records: kept for a minimum of six years to comply with UK tax and accounting laws.
• Contact and communication records: kept for up to two years after your last interaction unless required for ongoing dispute resolution or legal compliance.
• Marketing preferences: stored until you withdraw your consent or request deletion.
• Website analytics data: stored for up to 26 months.

Once the retention period expires, your data will be securely deleted or anonymised.

Data Sharing and Processors

We do not sell or rent your personal data. However, to provide our services efficiently, we may share your data with carefully selected third-party service providers (known as 'processors'), who act on our instructions and help us process orders, payments, and communications. These may include:

• Payment service providers, for securely processing card or online payments.
• Delivery partners and couriers, for fulfilling your orders.
• IT and cloud storage providers, for secure hosting, backup, or communication services.
• Website analytics services, for analysing user behaviour and improving our website.

All our processors are required by contract to respect the security of your personal data and to treat it in accordance with GDPR. They are not permitted to use your data for their own purposes.

Data Security

We implement appropriate technical and organisational measures to ensure the security of your personal information. This includes using secure servers, encrypting data transmissions, restricting access, and maintaining physical, electronic, and managerial procedures to safeguard your data.

Your Data Protection Rights

You have a number of important rights under the UK GDPR, including:

• Right to access – You can request a copy of the personal data we hold about you.
• Right to rectification – You can ask us to correct inaccurate or incomplete information.
• Right to erasure – In certain circumstances, you can ask us to delete your personal data.
• Right to restrict processing – You can ask us to restrict the processing of your data in certain situations.
• Right to object – You can object to our processing of your personal data where we are relying on legitimate interests.
• Right to data portability – You can request that we provide your data in a structured, commonly used and machine-readable format and, where possible, transmit it to another controller.
• Right to withdraw consent – Where we use consent as the basis for processing (such as for marketing), you may withdraw it at any time.
• Right to complain – You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not complied with data protection laws.

Policy Changes

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. The latest version will always be available on our website. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Contacting Us

If you have any questions regarding this Privacy Policy or wish to exercise any of your rights, please get in touch with us using the contact details provided on our website.