Florist Tottenham Privacy Policy Overview

Introduction

This Privacy Policy explains how Florist Tottenham collects, processes, stores, and safeguards your personal data when you place an order with us from Tottenham or surrounding districts. The policy ensures compliance with the General Data Protection Regulation ("GDPR") and outlines your rights concerning your personal information.

Scope of This Policy

This policy applies to all individuals who are customers of Florist Tottenham, specifically those placing orders for flowers and related products or services from Tottenham and neighboring areas. By placing an order with us, you acknowledge and agree to the collection and processing of your data as described in this policy.

Personal Data We Collect

We collect various types of personal data in order to provide you with our services, fulfill your orders, and improve your experience. The data we collect includes:

  • Contact Information: Such as your full name, delivery address, and phone number for order fulfillment.
  • Order Details: Details of products you order, delivery instructions, recipient details, and order history.
  • Payment Information: Transaction data (processed through secure third-party payment processors) but never the full payment card details by us directly.
  • Account Information: If you create an account, we store usernames and encrypted passwords.
  • Communication Data: Records of correspondence (such as feedback, queries, and complaints) sent through our communication channels.
  • Technical Data: Your IP address, browser type, device identifiers, and usage statistics collected via cookies or similar technologies when you visit our website.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

  • Contractual Necessity: Most of the data we collect is necessary to fulfill orders you place with Florist Tottenham.
  • Legal Obligation: Some records are kept to comply with legal and tax requirements.
  • Legitimate Interests: We may process your data to improve our services, ensure website security, prevent fraud, or for direct marketing (where permitted).
  • Consent: Where required, we rely on your explicit consent (for example, opting in to marketing communications), which you can withdraw at any time.

How We Use Your Personal Data

We use your data to:

  • Process and deliver your flower orders
  • Communicate with you about your order, delivery status, or any issues
  • Respond to questions, feedback, and customer service requests
  • Improve and enhance our products and services
  • Comply with legal and regulatory obligations
  • Send occasional marketing communications when permitted

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Generally, order-related data is retained for up to seven years to meet tax and business record obligations. Data collected for marketing purposes will be retained until you withdraw your consent or object to our use of your data for this purpose. When data is no longer required, it will be securely deleted or anonymized.

Processors and Data Sharing

To provide our services efficiently, we may engage third-party service providers ("processors") to perform tasks on our behalf, such as payment processing, order delivery, website hosting, and analytics. We only share the information necessary for them to perform their roles and require all processors to adhere to GDPR requirements, maintain confidentiality, and secure your data appropriately.

Examples of processors include payment service providers, courier services for local deliveries, and IT infrastructure providers. We do not sell or share your personal data with third parties for their own marketing purposes.

Your Rights Under GDPR

As a data subject under the GDPR, you have several key rights in relation to your personal data:

  • Right of Access: You may request details of the personal data we hold about you and how we process it.
  • Right to Rectification: If your information is incomplete or incorrect, you have the right to ask us to correct it.
  • Right to Erasure: You may, in certain circumstances, request the deletion of your personal data.
  • Right to Restrict Processing: You may request us to limit the processing of your data in specific situations.
  • Right to Data Portability: Where applicable, you can receive your personal data in a structured, commonly used, machine-readable format and transfer it to another provider.
  • Right to Object: You have the right to object to certain types of processing, such as direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, you can contact us using our designated communication channels provided through our website and ordering system.

Data Security

We adopt appropriate technical and organizational measures to ensure that your data is processed securely. This includes access controls, encryption, secure storage, staff training, and regular reviews of our information security practices. Although we strive to protect your information, no data transmission over the internet or electronic storage method is 100% secure, but we follow industry best practice to minimize risks.

International Data Transfers

Your data is primarily stored and processed within the United Kingdom or the European Economic Area (EEA). If any processor or service provider is located outside these regions, Florist Tottenham ensures that adequate measures and safeguards are in place, such as standard contractual clauses, to protect your data in accordance with GDPR requirements.

Updates to This Policy

We may update this Privacy Policy from time to time in response to changes in legal, technical, or business developments. The most current version will always be available on our website, indicating the date of revision. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact and Queries

If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise any of your GDPR rights, please reach out to us via the official contact forms or communication channels provided on the Florist Tottenham website. We are committed to addressing your privacy queries promptly and transparently.

This policy is effective as of June 2024.