South Tottenham Florist Privacy Policy

Introduction

This Privacy Policy describes how South Tottenham Florist collects, manages, and uses customers' personal information according to the United Kingdom General Data Protection Regulation (UK GDPR). It applies to every customer placing orders with South Tottenham Florist from South Tottenham as well as the surrounding districts. We are committed to processing personal data fairly, transparently, and in full compliance with data protection law.

What Data We Collect

We only collect personal data necessary to process your orders, provide our services, and comply with legal requirements. The information we may gather includes:

• Contact Information: Your name, delivery address, telephone number, and (if provided) email address, to fulfil order requests.
• Order Details: Information about your floral selections, purchase history, card messages, and recipient names and addresses.
• Payment Details: If you pay by card, your payment information is securely processed by our payment service provider (we do not store card numbers).
• Communication Records: Records of correspondence via phone or our website, for customer service and order confirmations.
• Technical Data: Limited technical information such as IP address and browser type, collected through our website to help us provide and maintain security and service reliability.

Lawful Basis for Processing

Under UK GDPR, South Tottenham Florist only processes personal information when permitted by law. Our main lawful bases for processing are:

• Performance of a Contract: Most data processing takes place to fulfil orders and deliver flowers as requested by you. Without your personal data, we could not execute our service contract with you.
• Legal Obligations: Some information is retained to meet our legal responsibilities, such as accounting and tax obligations.
• Legitimate Interests: Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights—for example, to improve our services or resolve enquiries.
• Consent: In the rare case we wish to send direct marketing communications, we will seek your explicit, opt-in consent. This consent can be withdrawn at any time.

How We Use Your Information

South Tottenham Florist uses your personal information to:

• Process your orders, deliver flowers, and communicate updates or issues regarding your order.
• Respond to your queries or requests for information, and resolve customer service matters.
• Comply with applicable legal and regulatory requirements.
• Maintain internal records for business administration and accounting.
• Improve our services, including reviewing customer feedback and purchase patterns.

How Long We Keep Your Data

We only retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting obligations.

• Order and Contact Information: Typically retained for a period of up to 7 years, in line with standard accounting practices.
• Marketing Data: If you have opted in to receive marketing, we will continue using your details for this purpose until you opt out or withdraw consent.
• Technical Data: Security logs and related technical records are usually kept for up to 2 years to monitor usage and prevent fraud.

After the applicable retention period, we ensure personal data is securely deleted or rendered anonymous.

Data Processors

To fulfil our services, South Tottenham Florist shares necessary data only with trusted service providers, known as data processors, who support our operations. These include:

• Payment Providers: Secure third-party payment gateways process your card transactions. We do not store your card details on our servers.
• IT & Web Service Providers: Secure web hosting and order management providers who store and protect your order data on our behalf.
• Delivery Partners: Couriers or drivers who are given only the information needed for delivery purposes.

All processors are required by contract to protect your information, use it only under our instructions, and follow relevant data protection laws. We do not sell or rent your personal information to third parties for their marketing purposes.

Your Data Protection Rights

South Tottenham Florist ensures you can exercise your rights under the UK GDPR. You have the right to:

• Access Your Information: Request a copy of personal data we hold about you.
• Rectify Mistakes: Request correction of inaccurate or incomplete personal data.
• Erasure: Ask us to delete your personal data where there is no good reason for us to continue holding it.
• Restriction: Request to limit the way we use your data in certain circumstances.
• Data Portability: Request the transfer of your data to another service provider, where technically feasible.
• Object: Object to us processing your data where our legal basis is legitimate interests or direct marketing (where applicable).
• Withdraw Consent: Withdraw your consent at any time where we rely on it (such as for marketing communications).

To exercise your rights, simply contact us using the details provided at the end of this policy. We will carry out all legally valid requests within one month, unless a shorter or longer period is required by law.

Data Security

South Tottenham Florist has implemented appropriate technical and organisational measures to ensure your personal data is protected against accidental loss, unauthorised access, disclosure, alteration, or destruction. Access to your data is limited to authorised personnel and processors on a need-to-know basis.

International Data Transfers

We do not transfer your personal data outside the United Kingdom or European Economic Area. If, in future, this becomes necessary for service provision, we will ensure any such transfers are carried out in accordance with UK data protection law and that safeguards are in place.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal obligations. We will always post the most current version on our website and indicate the effective date at the top of the page.

Contacting Us

If you have any questions or concerns regarding this Privacy Policy or how your personal data is processed, please contact us using the information on our website or in store. We are committed to promptly addressing all data protection enquiries.