Florists Barnet GDPR Privacy Policy

Introduction

This Privacy Policy details how Florists Barnet collects, processes, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection legislation. It applies to all customers placing orders with Florists Barnet within Barnet and its surrounding districts. Please read this policy to understand how your information is used and your rights regarding your data.

What Data We Collect

When you place an order or contact us at Florists Barnet, we may collect the following types of personal data:

• Identity Data: Full name, title, and, where applicable, details of the intended recipient.
• Contact Data: Delivery address, billing address, phone numbers, and similar contact details.
• Transaction Data: Order history, payment method details (we do not store card numbers), and invoice records.
• Communication Data: Your correspondence with us, such as messages or queries sent via our website or other communication channels.
• Usage Data: Information about how you use our website and services, such as IP addresses, browser type, and access logs.
• Marketing Preferences: Your preferences in receiving marketing information and your communication choices.

Lawful Bases for Processing Personal Data

We process your personal data only when there is a legal basis to do so, in compliance with GDPR. The primary lawful grounds are:

• Contractual necessity: To process and complete your flower orders, communicate with you about your orders, and deliver products or services as requested.
• Legitimate interests: To improve our services, manage relationships, and maintain security and operational integrity; balanced with your rights and freedoms.
• Legal obligations: Where we need to comply with laws or regulations, such as tax or accounting requirements.
• Consent: For specific uses, such as direct marketing, we will seek your explicit consent and provide an option to withdraw it at any time.

How We Use Your Data

Your data is used only to the extent necessary and relevant for our business operations, including:

• Processing and fulfilling your floral orders.
• Contacting you with order updates, delivery arrangements, or customer service communications.
• Managing payments and preventing fraudulent transactions.
• Providing customer support and responding to queries.
• Improving our website, products, and customer experience through usage analysis.
• Sending marketing communications, if you have consented to receive them.

Data Retention Policy

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. The criteria we use to determine retention periods include:

• The duration of our ongoing relationship with you (for example, as long as you have an active order with us).
• The requirements of applicable laws or legitimate business interests (such as record-keeping for tax or fraud prevention).

Typically, customer order details are kept for up to seven years in accordance with UK tax and accounting laws. After the retention period expires, your personal data will be securely deleted or anonymised.

Our Data Processors

Florists Barnet works with selected third-party service providers (data processors) to deliver and improve our services. These may include:

• Payment processing companies (to handle card payments and financial transactions, without us storing your card details).
• Delivery and logistics partners (to ensure timely and accurate delivery of your orders).
• IT hosting and support companies (to maintain our website and protect data integrity).
• Marketing and customer management platforms (for managing communications and preferences, with your consent).

All processors are contractually bound to adhere to GDPR requirements, ensuring your personal data is only used by them as instructed by Florists Barnet and is safeguarded by appropriate technical and organisational measures.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

• Right to access: You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
• Right to rectification: You have the right to correct any incomplete or inaccurate data we hold about you.
• Right to erasure: You may request the deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes collected.
• Right to restrict processing: In some cases, you can ask us to restrict or limit how we process your information.
• Right to data portability: Where applicable, you can request to receive your personal data in a structured, commonly used, and machine-readable format, or have it transmitted to another controller.
• Right to object: You can object to processing based on legitimate interests or direct marketing purposes.
• Right to withdraw consent: If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before your withdrawal.

If you wish to exercise any of these rights, please contact us using the appropriate contact methods provided on our website. We may require verification of your identity before fulfilling your request and will respond within the timeframes stipulated by UK GDPR.

Security and International Transfers

Florists Barnet implements appropriate technical and organisational safeguards to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Where data processors are located outside the UK or EEA, we ensure that adequate data protection measures are in place, such as approved international data transfer mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be posted on this page and we encourage you to review this policy regularly to stay informed.

Contacting Us

If you have any questions regarding this Privacy Policy, how we use your data, or wish to exercise any of your rights, please refer to our website for contact details. We are committed to upholding your privacy and addressing your concerns promptly and respectfully.