Privacy Policy for Flowers Canonbury Customers

Our Commitment to Your Privacy

At Flowers Canonbury, safeguarding the privacy of our customers is fundamental to how we operate. This Privacy Policy outlines how we collect, use, retain, and protect your personal data, specifically for customers placing orders from Canonbury and the surrounding districts. We are dedicated to ensuring that your information is handled in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

Scope of this Policy

This Privacy Policy covers the collection and processing of personal data from all individuals who place orders with Flowers Canonbury from Canonbury or its surrounding districts. It applies to information gathered through our website, phone orders, in person, and any other direct communication with us regarding the ordering or delivery of our products or services.

What Data We Collect

When you interact with Flowers Canonbury to place an order or make an inquiry, we may collect the following information:

• Contact Information: Your full name, delivery address, billing address, and occasionally, delivery instructions.
• Communication Details: Any correspondence you send us about your order, preferences, or special instructions.
• Transaction Information: Details about your order, such as product selections, quantities, chosen delivery dates, and payment method (card details are processed securely by our payment provider and not stored by us).
• Technical Data: Information about how you access and use our website, such as browser type, IP address, and device identifiers, which are collected via cookies and similar technologies.

Lawful Basis for Processing Your Data

Flowers Canonbury processes your personal data under lawful bases as outlined by the GDPR:

• Contractual Necessity: Most of your data is collected and processed because it is necessary for us to fulfill your order or provide requested services.
• Legitimate Interests: We may use data to improve our services, prevent fraud, or to communicate occasional updates. We always balance our interests against your rights and freedoms.
• Legal Obligations: Certain data may be retained or shared to comply with financial, tax, or other regulations.
• Consent: We obtain your explicit consent before sending you marketing communications or storing data not essential for order fulfillment. You may withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used strictly for the purposes for which it was collected, which may include:

• Processing and delivering your flower order, including customer support and handling inquiries.
• Managing payments and maintaining transaction records.
• Sending important updates related to your order.
• Improving and optimising our website or services to better serve you in the future.
• Complying with legal or regulatory obligations.
• With your permission, sending you news, offers, or information about our products and services.

How We Share and Store Your Data

Your data is only shared with trusted third-party processors who are essential for order processing and service delivery. These include payment service providers, delivery couriers, website hosting services, and IT support. Each of these providers is contractually obligated to protect your data and only act on our instructions. We do not sell or lease your personal data to any third party for marketing or other independent purposes.

Whenever possible, your information is stored within the United Kingdom or the European Economic Area (EEA). If we need to transfer data outside the EEA, we ensure that appropriate safeguards are in place to keep your information secure.

Data Retention: How Long We Keep Your Information

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically, we retain order and transaction-related data for up to six years, in line with tax and accounting laws. Communication and customer service records may be stored for up to three years. Once this data is no longer required, it is securely deleted or anonymised.

Your Rights Under GDPR

Under the GDPR, you have a number of important rights regarding your personal data. These include the right to:

• Access: Ask for a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Ask us to delete your personal data, where justified.
• Restriction: Request the limitation of processing your personal data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Portability: Receive your data in a structured, commonly used format to share with another provider.
• Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

To exercise these rights, or if you have any concerns about how your data is being handled, please contact us using the details provided in your order confirmation, or by reaching out through our website's contact options. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are not satisfied with our response.

Security of Your Data

We put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. Access to your data is restricted to staff and approved processors who need it for legitimate business purposes and are subject to confidentiality obligations.

Changes to This Policy

This Privacy Policy may be reviewed and updated periodically to reflect changes to our practices or legal requirements. The date of the last update will always be noted at the end of this document, and significant changes will be communicated directly to customers where appropriate.

Last updated: June 2024