Golders Green Florist Privacy Policy

Introduction

At Golders Green Florist, we are committed to respecting your privacy and protecting your personal data. This Privacy Policy explains how we collect, use, store, and process your information in compliance with the UK General Data Protection Regulation (GDPR) and related data protection laws. This policy applies to all customers placing orders for floral arrangements and related services with Golders Green Florist in Golders Green and surrounding districts.

What Data We Collect

We collect personal data necessary for us to process your orders and provide our services effectively. The types of data we collect include:

• Contact Information: Your full name, postal address, delivery address, and phone number.
• Order Details: Information about the products and services you purchase, including recipient information when sending flowers to others.
• Payment Information: Payment methods used (we do not retain full card details; payments are processed securely by third-party payment providers).
• Communication Records: Any correspondence between you and Golders Green Florist, including messages related to your orders or inquiries.
• Marketing Preferences: Your choices about receiving promotional materials from us.
• Website Usage Information: Information about your interactions with our website, such as IP address, browser type, and usage patterns, collected via cookies and similar technologies.

Lawful Basis for Processing Your Data

We process your personal data under the following lawful bases as defined by the GDPR:

• Contractual Necessity: To process your orders, arrange deliveries, handle payments, and provide customer support, it is necessary to collect and process certain data to fulfill our contract with you.
• Legal Obligations: In some circumstances, we are required to retain and process personal data to comply with applicable laws and regulations (for example, recordkeeping for tax purposes).
• Legitimate Interests: We may process your data for our legitimate business interests, such as improving our products and services, fraud prevention, safeguarding our website, and enhancing your customer experience, provided these interests do not override your rights and freedoms.
• Consent: In cases where we use your data for marketing purposes or collect optional data, we will seek your clear and informed consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling your orders, including delivery arrangements.
• Communicating with you about your orders or responding to your inquiries.
• Providing customer service and support.
• Processing payments securely via chosen payment processors.
• Sending you information about promotions, offers, and services, if you have consented to receive such communications.
• Improving our website functionality and customer experience.
• Meeting our legal and regulatory obligations.

Data Retention

Golders Green Florist retains your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:

• Order and transaction information is retained for up to seven years to comply with legal obligations.
• General correspondence and communication records are retained for up to three years from the last contact or completion of services.
• Marketing data is retained until you unsubscribe or choose to withdraw your consent.

When data is no longer required, it is securely deleted or anonymized.

Data Processors and Sharing

We work with selected third-party service providers who process personal data on our behalf ("processors"), such as:

• Payment Processors: Securely handling payment transactions.
• Delivery Services: Facilitating the delivery of your floral orders.
• Technical Service Providers: Hosting our website and managing IT infrastructure.
• Marketing Partners: Distributing emails or promotions, if consent has been given.

These processors are contractually obliged to safeguard your data, only process it for specified purposes, and act only on our instructions. We do not sell your data to third parties. Personal data may also be disclosed if legally required (for example, to law enforcement or regulatory authorities).

User Rights Under GDPR

As a data subject, you have several rights under the GDPR regarding your personal data, including:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data when it is no longer necessary or if processing was based on consent now withdrawn.
• Right to Restrict Processing: Under certain circumstances, you may request the restriction of processing your data.
• Right to Data Portability: You can ask for a copy of your data in a structured, commonly used format to transfer elsewhere.
• Right to Object: You may object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where consent is used as a legal basis, you have the right to withdraw it at any time.
• Right to Lodge a Complaint: You have the right to complain to the UK Information Commissioner’s Office (ICO) if you are concerned about how your data is handled.

To exercise your rights, please contact us using the details provided on our website or consult our team in-store.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure servers, access controls, encryption, and staff training on privacy obligations. While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

In general, we aim to keep your data within the United Kingdom and European Economic Area (EEA). Should it be necessary to transfer data outside these regions (for example, if a third-party provider is located internationally), we ensure adequate safeguards are in place consistent with UK data protection laws, such as approved contractual clauses.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal compliance. The current version will always be available on our website, and we encourage customers to review it periodically.

Contacting Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our customer service team in store or through the details provided on our website. We are committed to addressing your inquiries and upholding your rights.

This Privacy Policy was last updated in June 2024.