Harringay Florist Privacy Policy

Introduction

At Harringay Florist, we value the privacy and trust of all our customers. This Privacy Policy outlines how we collect, process, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all individuals who place orders with Harringay Florist in Harringay and the surrounding districts.

What Data We Collect

When you place an order or interact with our services, we may collect the following types of personal data:

• Identification Data: Name (customer and recipient), delivery address, and contact information such as address and phone number (where provided).
• Order Information: Details on products ordered, messages for floral cards, delivery instructions, date of order, and payment status.
• Payment Data: Information required to process payments (for example, payment confirmation from payment processors). Harringay Florist does not store your full card payment details; these are handled directly by our chosen payment processor.
• Communication Data: Records of correspondence regarding your order, including notes about delivery and complaints, if any.

We do not collect any special category (sensitive) data unless specifically necessary and with your explicit consent.

Lawful Basis for Processing Data

We process your personal data on the following lawful bases under the GDPR:

• Contractual Necessity: To process and deliver your florist order, and to fulfil our contract with you.
• Legal Obligation: To comply with applicable legal and regulatory requirements, such as maintaining transaction records for tax purposes.
• Legitimate Interests: To monitor the quality of our services, respond to enquiries, and improve customer experience, provided that these interests are not overridden by your rights and freedoms.
• Consent: Where you have provided explicit consent, such as for direct marketing or optional additional services. You can withdraw your consent at any time.

How We Use Your Data

We use your data only for the following purposes:

• Processing and fulfilling your orders, including communication about your order status.
• Managing payments and refunds.
• Responding to enquiries, feedback, or complaints.
• Improving our services and business operations.
• Complying with legal and financial obligations.
• (If you have consented) Sending occasional promotional communications relevant to our florist services.

How Long We Keep Your Data (Retention Policy)

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we will keep order and transaction data for up to seven years, as required by law for tax and company record-keeping. Communication data will be retained for the period required to resolve your enquiry or complaint, and for our internal reference, typically no longer than two years. If you withdraw your consent to marketing, we will ensure you no longer receive such communications and will remove your details from our marketing lists promptly.

Data Sharing and Processors

We limit the sharing of your personal data to only what is necessary:

• Payment Processors: Card and payment information is collected by secure, compliant payment processors. We do not store your card details on our systems.
• Delivery Partners: Selected couriers or delivery partners receive only the essential information required to complete deliveries (recipient name, address, and contact information if needed).
• IT and Cloud Service Providers: We use reputable IT and cloud service providers to securely store and process order information.
• Legal Authorities: Where legally required, we may share data with law enforcement, regulatory bodies, or in response to legal proceedings.

All our data processors are carefully chosen to comply with GDPR obligations and are required to keep your data secure and confidential.

How We Protect Your Data

We apply suitable organisational and technical security measures to protect your data from unauthorised access, loss, misuse, or disclosure. Access to personal data is limited to those staff and partners who need it to perform their duties. Our systems are regularly reviewed and updated in line with industry standards to maintain data protection and cyber security.

Your Rights Under the GDPR

As a customer of Harringay Florist, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of your personal data held by us.
• Right to Rectification: You have the right to have inaccurate or incomplete data corrected.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your data when it is no longer necessary or if you have withdrawn consent.
• Right to Restrict Processing: You can request restrictions on how your data is processed in certain circumstances.
• Right to Data Portability: You can request that your data be provided in a structured, commonly used format for transfer to a different service provider.
• Right to Object: You have the right to object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

We aim to respond to all rights requests within one month of receipt.

Children’s Data

We do not knowingly collect or process personal data of children under the age of 16. If you believe that personal data about a child has been provided to us by mistake, please contact us so we can remove it promptly.

Policy Applicability and Updates

This Privacy Policy is applicable to all orders and interactions made with Harringay Florist by customers from Harringay and surrounding districts. We may update this policy from time to time to reflect changes in legal requirements or our data practices. The current version will always be available and we encourage you to review it periodically.

How to Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise any of your rights under GDPR, please get in touch with Harringay Florist through our shop or by other available contact methods. We will respond to all enquiries as promptly as possible.

This Privacy Policy was last updated in June 2024.