Flowers Harringay Privacy Notice

Introduction

This Privacy Policy outlines how Flowers Harringay (“we”, “our”, or “us”) collects, uses, stores, and protects your personal data when you place orders with us. This policy applies to all customers placing orders in Harringay and surrounding districts. We are committed to safeguarding your privacy and ensuring your data is processed lawfully and transparently in accordance with the General Data Protection Regulation (GDPR).

What Data We Collect

When you interact with Flowers Harringay, we may collect the following types of personal data, depending on your engagement with our services:

• Identification Data: Your name, and where you provide it, your recipient’s name for delivery purposes.
• Contact Information: Your billing and delivery address, and where shared, your email address and contact telephone number.
• Order Details: Information about the products and services you purchase, delivery instructions, and order notes.
• Payment Information: Payment card information (processed securely by third-party payment processors), billing information, and purchase history.
• Technical Data: IP address, browser type, device identifiers, and related technical information automatically collected when you access our website.
• Communication Data: Any correspondence or feedback you provide in relation to your orders or queries, including preferences and complaints.

Lawful Basis for Processing Your Data

Under GDPR, we require a lawful basis to collect and process your personal data. The main lawful bases we rely on are:

• Contractual Necessity: To fulfil and manage your orders, process your payments, and deliver products, we need to process relevant personal data.
• Legal Obligation: We may be required to process and retain certain data to comply with obligations under applicable law, such as accounting and tax regulations.
• Legitimate Interests: Where processing your data is necessary for our legitimate business interests—such as improving services, ensuring security, or dealing with customer complaints—and where your interests and fundamental rights do not override those interests.
• Consent: In limited cases, such as for direct marketing by email, we rely on your explicit consent. You have the right to withdraw your consent at any time.

How We Use and Share Your Data

Your data is used strictly for the provision of our flower delivery services and to support our business operations. We use your data to:

• Process and confirm your order
• Arrange delivery to you or your recipient
• Maintain transaction and purchase histories
• Respond to your questions or feedback
• Comply with legal and audit requirements
• Improve our website, products, and services

We do not sell or rent your personal data to third parties. Where it is necessary to engage trusted service providers for certain business functions, we ensure they act only on our instructions and provide assurances that they uphold the security and confidentiality of your data, consistent with our obligations under GDPR.

Processors and Third Parties

Flowers Harringay uses select third-party processors to assist in delivering our services, including:

• Payment Service Providers: To process secure electronic payments for your orders.
• IT and Cloud Service Providers: For web hosting, data storage, customer management systems, and email communications.
• Delivery Partners: To facilitate order dispatch and delivery within Harringay and nearby districts.
• Analytics Providers: To monitor and improve our website's performance.

All processors have been subject to appropriate due diligence and contractual requirements to ensure GDPR compliance. Your data is processed within the United Kingdom or European Economic Area (EEA), and we do not transfer personal data outside of these regions except with suitable safeguards in place.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required to meet legal, regulatory, or reporting requirements. Our typical retention periods are as follows:

• Order and transaction records: retained for up to seven years to meet financial and legal obligations.
• Customer account records: retained for up to five years after your last interaction unless you request deletion, subject to exceptions where legal retention is required.
• Marketing consent and preferences: retained until you withdraw your consent or otherwise unsubscribe.

After the applicable retention period, your data is securely deleted or anonymised.

Your Rights Under GDPR

As a data subject, you have specific rights regarding your personal data, including:

• Right of Access: You may request access to a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request corrections to incomplete or inaccurate data we hold.
• Right to Erasure: In some cases, you may request deletion of your personal data (“right to be forgotten”).
• Right to Restrict Processing: You may request limits on how we use your data.
• Right to Data Portability: You can request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before your withdrawal.
• Right to Lodge a Complaint: If you have concerns about how we handle your personal data, you may contact the relevant supervisory authority, such as the UK's Information Commissioner's Office (ICO).

Data Security

We implement appropriate technical and organizational security measures to protect your data against unauthorised access, loss, alteration, or disclosure. These include secure servers, encryption technologies, restricted access controls, and regular staff training on data protection responsibilities. Our security measures are regularly reviewed and updated to address emerging threats.

Policy Scope and Updates

This Privacy Policy is effective for all customers placing orders with Flowers Harringay in Harringay and the surrounding districts. We may update this policy from time to time in response to operational or legal changes. When significant updates are made, we will inform you where appropriate. Please review this policy periodically to remain aware of how your data is handled.

Contact and Further Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact Flowers Harringay in writing. We will respond to your requests as promptly as possible and in accordance with GDPR requirements.