Florist Harefield Privacy Policy

Introduction

This Privacy Policy outlines how Florist Harefield collects, processes, stores, and protects the personal data of individuals who place orders with us from Harefield and the surrounding districts. We are committed to safeguarding your data and complying with the EU General Data Protection Regulation (GDPR), ensuring your privacy, security, and rights are fully respected.

Scope of This Policy

This policy applies to all customers who engage with Florist Harefield by placing orders for goods or services within Harefield and neighboring areas. It provides details on what data we collect, how we use it, our lawful basis for processing it, and your rights regarding your personal information.

What Data We Collect

When you place an order or interact with Florist Harefield, we may collect the following types of information:

• Personal Identification Data: Name, delivery address, billing address.
• Contact Information: Phone number, and/or other necessary contact details you provide when placing an order.
• Order Details: Bouquet or product preferences, messages for recipients, and delivery instructions.
• Transaction Data: Payment transaction details (note: we do not store card details; we only process through secure third-party payment processors).
• Correspondence: Any communications you send to us, including feedback or queries regarding orders.

Lawful Basis for Processing

Florist Harefield processes your personal data in accordance with one or more lawful bases as required under GDPR:

• Contractual Necessity: We process your data to fulfill your florist order, including processing payment and arranging delivery.
• Legal Obligation: In some cases, we are required to retain data to comply with legal obligations, such as tax or accounting regulations.
• Legitimate Interests: For customer service, quality assurance, and business administration purposes, where such interests are not overridden by your data protection rights.
• Consent: If we wish to use your data for purposes such as marketing, we will first obtain your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your data is used strictly to process and deliver your order, communicate with you regarding order status, and respond to your queries. Where you have provided consent, we may occasionally inform you about our services, updates, or offers. We do not use your data for automated decision-making or profiling.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements. Generally, order and transactional information is kept for up to seven years to meet legal obligations. After the retention period, personal data is securely deleted or anonymized.

Data Processors and Third Parties

Florist Harefield uses reputable third-party service providers (data processors) to facilitate certain business operations, such as payment processing, order management, and delivery logistics. All third parties are contractually required to process your personal data in accordance with GDPR and to protect it appropriately.

We do not sell, rent, or trade your personal data to outside organizations. Data transfers outside the European Economic Area (EEA) only occur where adequate protection is in place, following GDPR guidelines.

Your Data Protection Rights

As a data subject under the GDPR, you are entitled to:

• Access: Request a copy of your personal data we hold.
• Rectification: Correct or amend inaccurate or incomplete information.
• Erasure: Request deletion of your data, subject to any legal obligations that require us to retain certain information.
• Restriction: Request that we limit the processing of your personal data under certain circumstances.
• Data Portability: Obtain and reuse your data for your own purposes across different services, where technically feasible and legally permissible.
• Objection: Object to processing where we rely on legitimate interests or direct marketing as a lawful basis.
• Withdraw Consent: Withdraw consent at any time where we rely on consent for data processing.

To exercise your rights, please contact us via our provided means of communication. We will respond to your request within one month, in accordance with GDPR requirements.

Data Security and Protection

We implement appropriate organizational and technical measures to protect your data against unauthorized access, loss, alteration, or disclosure. While we strive for the highest level of security, no internet or electronic transmission is entirely risk-free. We encourage you to use secure internet connections when interacting with our platforms.

Children's Privacy

Florist Harefield's services are not intended for use by children under the age of 16. We do not knowingly solicit or process data from individuals in this age group. If you believe a child has provided us with personal data without parental consent, please inform us so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in practice, regulation, or other operational reasons. Any updates will take effect upon publication, and we encourage you to review this policy periodically.

Contact and Complaints

If you have any questions or concerns about how we process your personal data, or if you wish to make a complaint, you may contact us through our available communication channels. You also have the right to lodge a complaint with a supervisory authority located in the United Kingdom.

This Privacy Policy was last updated in June 2024.