Privacy Policy for Haringey Florist Customers

Introduction

This Privacy Policy explains how Haringey Florist collects, uses, stores, and protects the personal data of customers who place orders with us in Haringey and surrounding districts. We are committed to ensuring that your privacy is protected, and that your data is processed in accordance with the General Data Protection Regulation (GDPR) and other relevant UK data protection laws. This policy applies to all customers who use our services, whether ordering in-store, online, or via phone.

What Data We Collect

To provide our services and fulfill your orders, Haringey Florist collects and processes the following categories of personal data:

• Identity Data: Full name, title, and, if required for order processing, recipient names.
• Contact Data: Delivery addresses, billing addresses, and other relevant address information; phone numbers, and, if needed, email addresses.
• Order Details: Information relating to your order, such as items purchased, delivery instructions, order notes, and preferences.
• Payment Data: Information required for processing your payment. Payment data is handled securely and may be processed by third-party payment processors; we do not store your full payment card details on our systems.
• Technical Data: If you order via our website, we may collect limited technical data such as IP address, browser type, device identifiers, and information about how you interact with our website (collected through cookies and similar technologies).
• Communication Data: Records of your communication with us, including messages sent via website forms or by phone, and any feedback you provide.

Lawful Basis for Processing Personal Data

Haringey Florist processes your personal data based on the following legal grounds, as allowed by the GDPR:

• Contractual necessity: To fulfill your orders and provide the services you request, including processing payments and arranging delivery.
• Legal obligations: To comply with legal and regulatory obligations (such as tax and accounting requirements).
• Legitimate interests: To improve our products and services, communicate important information to you, and prevent fraud (provided these interests are not overridden by your rights and interests).
• Consent: Where required, for example if you consent to receive marketing communications. You have the right to withdraw your consent at any time.

How We Use Your Data

We use the data collected for the following purposes:

• Processing and fulfilling your flower order, including delivery to the specified address
• Processing payments and issuing receipts or invoices
• Communicating with you about your order, any queries, or customer feedback
• Maintaining records for accounting, tax, and legal purposes
• Improving our products, services, and customer experience
• With your permission, sending you information about special offers, discounts or news concerning Haringey Florist

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying any legal, accounting, or reporting requirements. Generally, we retain order and transaction records for up to 7 years to comply with tax and legal obligations. Basic contact and communication data may be retained for the period necessary to resolve any queries or disputes following an order. When your data is no longer needed, it will be securely deleted or anonymized.

Data Processors and Third Parties

To effectively conduct our business and deliver our services, we may share your data with carefully selected third-party service providers ("processors") who perform services on our behalf. These may include:

• Payment processing providers
• Delivery and courier companies
• IT and website hosting providers
• Accountants, consultants or professional advisers (only as required for legal compliance)

All third-party processors are required to comply with applicable data protection laws and to process your data solely according to our instructions. We do not sell or rent your personal data to third parties for marketing purposes.

International Data Transfers

Your personal data is generally stored and processed within the United Kingdom or the European Economic Area (EEA). If we need to transfer your data outside the UK or EEA (for example, if our service providers are located internationally), we will take steps to ensure that your data receives an equivalent level of protection as provided under UK and EU data protection law.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights in respect of your personal data processed by Haringey Florist:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data about you.
• Right to erasure: Also known as "the right to be forgotten," you can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (subject to legal retention requirements).
• Right to restriction: You may request that we restrict processing where you contest the accuracy of your data or object to its use.
• Right to object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to data portability: You have the right to request the transfer of your data to another provider, where technically feasible.

To exercise any of these rights, please contact us with your request. We will respond within the legal timeframes set by GDPR.

Security of Your Data

We use appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include secure servers, encryption technologies where appropriate, and limiting data access to authorized personnel only.

Policy Updates

We may amend this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The updated policy will always be made available to customers when placing orders. We recommend that you review this policy periodically.

Contact and Queries

If you have any questions, concerns, or requests regarding the processing of your personal data at Haringey Florist, please reach out to us through our official customer service channels or in-store. We are committed to addressing your privacy concerns in a timely and transparent manner.