Flowers Stoke Newington Privacy Policy

Introduction

This Privacy Policy explains how Flowers Stoke Newington (‘we’, ‘our’, or ‘us’) collects, uses, stores, and protects your personal data as a customer placing orders from Stoke Newington and surrounding districts. We are committed to ensuring your privacy is respected and your data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Scope of Policy

This policy applies to all individuals ordering flowers, bouquets, or related products and services from Flowers Stoke Newington, whether through our website, by telephone, or in person. By placing an order or using our services, you agree to the terms described in this Privacy Policy.

What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, title.
• Contact Data: Delivery address, billing address, recipient’s address, contact number.
• Order Information: Details of the products or services you have ordered, special delivery instructions, messages for card attachments.
• Payment Data: Limited payment information required to process your payment. Full payment card details are processed securely by our third-party payment providers.
• Communication Data: Correspondence, queries, and feedback provided to us by phone, online, or in person.
• Technical Data: IP address, browser type, operating system, and usage data when ordering via our website.

Lawful Basis for Processing

We process your personal data under the following lawful bases as required by the GDPR:

• Contractual Necessity: To perform the contract when you place an order with us.
• Legal Obligation: To comply with applicable laws, such as taxation or consumer rights legislation.
• Legitimate Interests: To improve our services, manage queries, and prevent fraud, provided these interests do not override your fundamental rights.
• Consent: For marketing communications or where we are required to gain your explicit permission.

How We Use Your Data

Your data is used for the following purposes:

• To process and deliver your orders efficiently.
• To manage payment and transaction records.
• To communicate order updates, respond to enquiries, and provide customer support.
• To maintain accurate internal records for auditing and regulatory compliance.
• To notify you about changes to our service or privacy policy.
• To send marketing communications, if you have consented to receive them.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including meeting legal, accounting, or reporting requirements. Typically, personal data related to orders is retained for up to seven years, in line with UK tax laws. If you make a specific request for data deletion, we will comply, provided there is no overriding legal requirement.

Processors and Third Parties

We employ trusted third-party service providers (‘processors’) to assist with order fulfillment, payment processing, IT services, and customer service. These providers are authorized to use your personal data solely to provide these services to us and are bound by data protection obligations under the GDPR.

Categories of processors may include:

• Payment processors for handling transactions securely.
• Delivery and courier companies for ensuring your flowers reach the correct address.
• IT support and hosting partners for website operation and secure storage of data.

We ensure that all processors handle your data in a secure and confidential manner and that no data is transferred outside the European Economic Area (EEA) without appropriate safeguards.

Your GDPR Rights

Under the GDPR, you have the following rights in relation to the personal data we hold about you:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure: Request your data is deleted or removed where there is no good reason for us to continue processing it.
• Right to Restrict Processing: Request that we suspend processing of your personal data in certain circumstances.
• Right to Data Portability: Request your data be sent to you or a third party in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing of your personal data where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where consent is the basis for processing, you have the right to withdraw it at any time.

Security of Your Personal Data

We take appropriate technical and organisational measures to safeguard your personal data from unauthorized access, loss, or misuse. Access to your information is restricted to authorized staff and essential third-party processors who are subject to strict confidentiality obligations.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect data from children under this age. If you become aware that a child has provided us with personal data without parental consent, please contact us so we can remove the information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our data practices or legal requirements. We will notify you of any significant changes. The most recent version will always be available on request and via our website.

Contact Us

If you have questions or wish to exercise your rights regarding your personal data, please contact us in writing using the details provided on our website or in our order confirmation documentation. We will respond to your request as soon as possible and always within the timeframes required by law.