Privacy Policy for Flowers New Southgate Orders
Introduction
This Privacy Policy explains how Flowers New Southgate (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you place orders with us in New Southgate and the surrounding districts. We are committed to maintaining your trust and protecting your data in compliance with the EU General Data Protection Regulation (GDPR).
Scope of This Policy
This Policy applies to all customers placing orders with Flowers New Southgate from within New Southgate and its surrounding districts. It details how we collect, process, and protect your data when you engage with our services, whether in person, via telephone, or through our online presence.
Personal Data We Collect
Depending on your interactions with us, we may collect the following categories of personal data:
- Identity information: Name, surname, and, if applicable, title.
- Contact information: Delivery address, billing address, and, in certain cases, a contact telephone number for order or delivery queries.
- Order details: Precise order contents, delivery instructions, and special requests (such as card messages).
- Payment information: Transaction and payment details processed in compliance with secure payment standards.
- Communication records: Records of interactions for order fulfilment and customer service purposes.
We do not intentionally collect sensitive personal data (special categories of personal data) unless you provide it voluntarily (for example, if a message attached to an order reveals such data).
Lawful Basis for Processing
Under the GDPR, we must identify a valid lawful basis for processing your personal data. For Flowers New Southgate, our primary lawful bases are:
- Contractual necessity: To process and deliver your orders, handle payments, and provide customer service.
- Legal obligation: To maintain records as required by tax, accounting, and regulatory laws.
- Legitimate interests: To improve our services, respond to customer queries, and prevent fraud, provided these interests do not override your rights.
- Consent: For optional communications, such as marketing. If we seek your consent, you may withdraw it at any time.
How We Use Your Information
We use your personal data for the following purposes:
- Processing your flower orders and delivering them as requested.
- Contacting you regarding your order, delivery, or to respond to your enquiries.
- Processing payments and issuing receipts.
- Complying with our legal and regulatory obligations.
- Improving our services and internal record keeping.
- Sending information about our services, offers, or promotions (only with your explicit consent).
Retention of Personal Data
We retain your personal data only as long as necessary for the purposes outlined in this Policy and/or to comply with legal, regulatory, and accounting requirements. Typically, we retain customer order records for up to seven years to satisfy accounting and tax obligations. After this period, your personal data is securely deleted or anonymised.
If you withdraw your consent for optional communications, we will promptly remove your details from our marketing records and cease further communications.
Data Processors and Third Parties
We may engage trusted third-party service providers (“data processors”) to assist in delivering our products and managing our business. These may include:
- Payment processors, to securely handle transactions.
- IT service providers, for maintaining our systems and databases.
- Delivery partners, solely for the purpose of fulfilling your order.
We require all third-party processors to respect the security of your personal data and to process it in accordance with the law. They may only process your data for specified purposes and may not use it for their own ends.
We do not sell or share your personal information with third parties for marketing purposes.
International Data Transfers
In the rare event we need to transfer your personal data outside of the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, consistent with the requirements of GDPR, to keep your data protected at all times.
Security of Your Data
We are committed to securing your personal data. We use appropriate organisational and technical measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. This includes restricting access to your data to necessary personnel and using secure protocols for data transmission.
Your Data Protection Rights
Under the GDPR, you are entitled to the following rights regarding your personal data:
- Right of access: You can request a copy of all personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can request the deletion of your personal data, subject to legal restrictions.
- Right to restriction: You can request we restrict processing of your data in certain circumstances.
- Right to data portability: You can request your data be transferred directly to you or to another service provider.
- Right to object: You can object to the processing of your data where we rely on legitimate interests or marketing purposes.
- Right to withdraw consent: Where you have provided consent, you can withdraw it at any time.
To exercise your rights, please contact us using the details on our website or at our place of business. We will respond to all requests in accordance with GDPR requirements and local law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The latest version will always be available in-store or via our online platforms. We recommend reviewing this Policy periodically to stay informed about how we protect your data.
Contact and Complaints
If you have questions or concerns about how we use your personal data, or if you wish to make a complaint, please contact us using the details provided on our website or at our business premises. If you are not satisfied with our response, you have the right to lodge a complaint with the appropriate data protection authority.
Your trust is important to us, and we are always happy to address any feedback or concerns.
