Flowers Finchley Privacy Policy for Customers

Introduction

This Privacy Policy explains how Flowers Finchley collects, uses, stores, and protects your personal data when you place an order with us. It applies to all customers ordering flowers from Finchley and surrounding districts. We are committed to respecting your privacy, complying fully with the UK General Data Protection Regulation (UK GDPR), and being transparent about how your information is managed.

What Data We Collect

When you place an order or interact with Flowers Finchley, the types of personal data we collect may include:

• Contact details: Name, address, phone number, and, where provided, email address.
• Order information: Delivery recipient's name, address, and contact details, order notes, and details of the products purchased.
• Payment details: Payment card information is processed securely via external providers and is not stored directly by Flowers Finchley.
• Communication records: Records of your correspondence with us, whether online, by phone, or in writing.
• Website usage: IP address, browser type, and usage data collected via cookies (if applicable and only with your consent for non-essential cookies).

Lawful Basis for Processing Your Data

Flowers Finchley processes your personal data lawfully, fairly, and transparently for specific purposes. The principal lawful bases for our data processing activities under UK GDPR are:

• Contractual necessity: We use your information to fulfil your flower orders, deliver products, and manage payments. Without this information, we cannot complete your purchase.
• Legal obligation: We may need to process and retain certain data to comply with the law, such as maintaining transaction records for tax and accounting purposes.
• Legitimate interests: We may process data to support business operations, improve our services, or respond to your queries in a way that does not unduly affect your rights and interests.
• Consent: Where required (such as for marketing communications or non-essential cookies), we will obtain your explicit consent, which you can withdraw at any time.

How We Use Your Information

We use your data for several purposes, all in line with our commitment to keeping your data secure and confidential:

• Processing and delivering your orders, including arranging deliveries to recipients.
• Managing payment transactions through trusted external payment processors.
• Communicating with you about orders, queries, or customer service needs.
• Fulfilling legal, regulatory, and tax obligations.
• Improving our website, products, and services through anonymised data or, where applicable, with your consent to analytics.

Data Retention

Flowers Finchley retains your personal data only as long as necessary. Generally, order and account information are retained for up to seven years from the date of your order to comply with financial and legal requirements. Communication records are typically maintained for no longer than two years after your last interaction unless legal processes require longer retention. After these retention periods, we securely delete or anonymise your personal information.

Processors and Third Parties

To deliver our services effectively, we may share necessary data with carefully selected third-party processors, always ensuring they meet strict data protection requirements. The third parties or categories of processors we use include:

• Payment processors: To securely handle payment transactions without storing your card details ourselves.
• Delivery partners: Responsible for delivering your orders to you or your recipient.
• IT and hosting providers: To support our website, manage data securely, and maintain our ordering systems.
• Professional advisors: Such as accountants, where necessary for our business operations or legal compliance.

We will not sell your information or share it with any third parties for marketing purposes without your explicit consent. All data processors are contractually bound to protect your information and act only under our instructions.

Your Rights

Under data protection law, you have several important rights, including:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct or update inaccurate or incomplete data.
• Right to erasure: You may request deletion of your data where there is no legal or contractual reason for us to retain it.
• Right to restrict processing: You can ask us to restrict the use of your data in certain circumstances.
• Right to data portability: Where applicable, you may ask to transfer your data to another provider.
• Right to object: You can object to our processing of your data based on legitimate interests or for direct marketing (where applicable).
• Right to withdraw consent: Where we process data based on your consent, you may withdraw it at any time.

Should you wish to exercise your rights, please contact us using your usual method of communication with Flowers Finchley. We will respond to your request within the timeframe set out by UK GDPR unless exceptional circumstances apply.

Data Security

Flowers Finchley takes data security very seriously. We implement a range of appropriate technical and organisational measures to safeguard your information against loss, misuse, or unauthorised access. Our security measures include encrypted payment processing, restricted access to customer data, and regular staff training on data protection.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices or relevant laws. Customers are encouraged to review the Privacy Policy regularly when placing new orders. Any significant changes will be clearly communicated.

Contacting Us

If you have any questions, concerns, or requests regarding this Privacy Policy or about your personal data, please get in touch with us using your regular Flowers Finchley contact method. We are committed to addressing all privacy-related requests promptly and fairly.