Florist Islington Privacy Policy

Introduction

This Privacy Policy outlines how Florist Islington collects, uses, stores, and protects your personal information when you place orders with us, whether you are in Islington or the surrounding districts. We are firmly committed to safeguarding your privacy, complying fully with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws. Please read this policy carefully to understand your rights and how we process your personal data.

Scope of This Policy

This policy applies to all individuals who interact with Florist Islington for the placement of orders, inquiries, or related services, whether via our website, over the phone, or in person. If you are a customer based in Islington or nearby districts and make use of our flower delivery or collection services, this notice is meant for you.

What Data We Collect

Florist Islington may collect and process the following categories of personal data to fulfil your orders and provide quality service:

• Identity Data: Name, title, and, where applicable, identification information for fraud prevention.
• Contact Data: Delivery address, billing address, phone number, and postal code, to process orders and deliveries.
• Order and Transaction Data: Items ordered, purchase history, delivery instructions, payment status (note: we do not store your credit card details).
• Communication Data: Correspondence including emails, gift card messages, and notes related to your order or inquiries.
• Technical Data: IP address, browser type, device identifiers, and cookies, collected automatically when you visit our website to ensure site functionality and security.
• Marketing Preferences: Your choices regarding receiving marketing or promotional communications from us.

Lawful Basis for Processing Data

We process your personal data under the lawful bases provided by the GDPR:

• Contractual necessity: Most data collected is necessary for us to fulfil your order. This includes processing transactions, arranging delivery, and managing your customer account.
• Legal obligation: Certain processing is required for us to meet legal and regulatory requirements, such as maintaining records for tax purposes.
• Legitimate interests: We may use your information to enhance service quality, improve website security, and ensure our business operates efficiently, provided these interests do not override your privacy rights.
• Consent: For sending electronic marketing communications, we rely on your explicit consent. You may withdraw your consent at any time.

How Your Data is Used

Your information is used for the following purposes:

• Processing and delivering your orders accurately and promptly.
• Communicating with you about your orders, delivery details, or requests.
• Improving our services and website experience.
• Complying with legal and regulatory requirements.
• Sending promotional offers and updates, only if you have opted in.

Data Retention

Personal information is retained only for as long as needed for the purposes it was collected, unless a longer retention period is required or permitted by law. Typically, order and transaction data is kept for up to seven years to comply with accounting regulations. Where you have given marketing consent, your details will be retained until you opt out. Once data is no longer required, it will be securely deleted or anonymised.

Processors and Data Sharing

To provide our services, we may share your personal data with trusted data processors. These typically include:

• Payment processors: Securely handle online transactions. We do not store your credit or debit card details on our systems.
• Delivery and logistics partners: Ensure your flowers reach their destination efficiently.
• IT service providers: Support our website operations and data hosting.

All third-party processors are contractually required to adhere to GDPR and similar standards, ensuring your information remains protected. We do not sell or rent your data to third parties.

International Transfers

In some instances, your personal data may be processed or stored outside the UK or European Economic Area. When such transfers are required, we ensure they are subject to appropriate safeguards as required by GDPR to maintain the protection of your data.

Security of Your Data

We have implemented appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or misuse. These measures include secure servers, encrypted communications, periodic security reviews, and staff training.

Your Rights Under GDPR

You have a range of rights regarding the personal data we hold about you, including:

• Access: The right to request copies of your personal data held by us.
• Rectification: The right to correct inaccurate or incomplete data.
• Erasure: The right to request the deletion of your data in certain circumstances ("right to be forgotten").
• Restriction: The right to restrict certain processing activities.
• Objection: The right to object to processing, in particular to direct marketing.
• Portability: The right to receive your data in a commonly used and machine-readable format.
• Withdrawal of consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise your rights, or if you have questions or concerns about your data, please contact us using the details on our website or contact page.

Changes to This Privacy Policy

From time to time, we may update this Privacy Policy to reflect changes in the way we process your data or to comply with legal and regulatory requirements. We encourage you to review the policy periodically. Substantial changes will be communicated to you through our website or during your interactions with us.

Contact and Complaints

If you have any questions, concerns, or wish to exercise your privacy rights, please refer to our website for the most current contact details. If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner’s Office or the relevant supervisory authority in your jurisdiction.

This Privacy Policy applies from 25 June 2024 and forms part of our ongoing commitment to protect your privacy as a Florist Islington customer.