Privacy Policy for Flowers Haringey Customers

Introduction

At Flowers Haringey, we value the privacy of our customers and are dedicated to protecting your personal information. This Privacy Policy explains how we collect, use, share, retain, and safeguard the personal data you provide when placing orders with Flowers Haringey. Our policy applies to all customers placing orders for floral arrangements and related services in Haringey and the surrounding districts. We comply fully with the General Data Protection Regulation (GDPR) and all applicable UK data protection legislation.

What Data We Collect

To fulfill your orders and provide exceptional service, Flowers Haringey collects the following personal data as necessary and relevant:

• Identification Information: Name of the customer, and if different, the recipient.
• Contact Details: Delivery address, billing address, telephone number(s).
• Order Data: Details of your order, special instructions, messages to recipients, and product preferences.
• Payment Data: Where applicable, limited payment details (such as payment confirmation from your chosen payment processor); we do not store full card details ourselves.
• Correspondence: Communications you make with us regarding orders, feedback, and customer service queries.
• Technical and Usage Data: Data generated from browsing our website (such as IP address, device type, browser type, and cookies, where applicable).

Lawful Basis for Processing

Flowers Haringey only collects and processes your data where we have a valid legal basis under GDPR. Our primary lawful bases include:

• Contractual Necessity: Processing your data is necessary to fulfill your floral order, deliver products, and manage customer accounts.
• Legal Obligation: We may process your data to comply with regulations (such as those concerning taxation and accounting).
• Legitimate Interests: To improve our products, ensure the quality of our services, respond to queries, or protect against fraud, provided these interests do not override your rights and interests.
• Consent: In some cases, we may rely on your explicit consent (for example, for direct marketing). Where this applies, you can withdraw consent at any time.

Use of Your Personal Data

We use your personal data for the following specific purposes:

• Processing and fulfilling your orders, including delivery and invoicing.
• Communicating order confirmations, updates, and responding to your requests.
• Providing customer service and support.
• Administrative tasks necessary for our business operations.
• Complying with legal and tax obligations.
• Improving our products, services, and customer experience.
• Where legally permitted, sending you information about our services or promotional offers, unless you opt out.

Retention of Personal Data

Flowers Haringey retains your personal data only as long as necessary for the purposes for which it was collected and to meet our legal obligations. The typical retention periods are:

• Order Records: Retained for up to seven years to comply with accounting and tax regulations.
• Marketing Data: Retained until you withdraw consent or opt out.
• Customer Correspondence: Retained as needed to resolve queries or provide follow-up information.

After these periods, your personal data will be securely deleted or anonymised.

Data Processors and Third-Party Sharing

To provide our services, Flowers Haringey may use carefully selected third-party processors, including:

• Payment Service Providers: To process payments securely. We do not store or have access to your full payment card data.
• Delivery Partners: To deliver floral orders to your nominated address.
• IT and Cloud Service Providers: For managing our website, storing encrypted data, and enabling communications.
• Accountants and Legal Advisors: For compliance, auditing, and accounting purposes.

All third-party processors act only on our instructions, provide sufficient guarantees regarding data protection, and are contractually bound to protect your data. We do not sell or share your data with advertisers or unrelated third parties.

User Rights Under GDPR

You have specific rights under GDPR in relation to your personal data:

• Access: You may request access to your personal data and receive a copy of it.
• Rectification: If your data is incorrect or incomplete, you can request correction.
• Erasure: You can request deletion of your data when it is no longer necessary.
• Restriction: You can request that we restrict the processing of your data under certain circumstances.
• Objection: You have the right to object to processing, including use of data for marketing purposes.
• Portability: You can request to receive certain data in a standard electronic format, or to have it transferred to another provider.
• Withdraw Consent: Where processing is based on consent, you may withdraw this at any time.

To exercise your rights, please contact us using the details provided on our website. For your security, we may require verification of your identity before responding to your request.

How We Protect Your Data

We are committed to ensuring the security of your information. Flowers Haringey implements suitable technical and organisational measures to prevent unauthorised access, disclosure, alteration, or destruction of personal data. These measures include encrypted data storage, secure servers, limited access to personal data, and staff training in information security and data protection.

Policy Applicability and Updates

This Privacy Policy applies to all customers who place Flowers Haringey orders for delivery in Haringey and the surrounding districts. We regularly review this policy to ensure ongoing compliance and transparency. Any updates will be posted on our website with a revised effective date. We recommend that you check this policy each time you place an order or use our services to stay informed.

Contact and Further Information

If you have questions about this Privacy Policy or your personal data, please contact us through the contact details available on the Flowers Haringey website. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office.