Florist South Tottenham Privacy Policy

Introduction

This Privacy Policy explains how Florist South Tottenham collects, manages, uses, and protects your personal information in compliance with the UK General Data Protection Regulation (GDPR). It applies to all customers placing orders with Florist South Tottenham from South Tottenham and the surrounding districts. By using our services, you consent to the practices described in this policy.

What Personal Data We Collect

Florist South Tottenham collects the following categories of personal data when you place an order or make an enquiry:

  • Contact Information: such as your name, address (including delivery and billing addresses), and (if provided) alternative recipient contact details.
  • Order Information: including details of products ordered, delivery instructions, and transaction details.
  • Payment Information: processed securely by payment processors; we do not store full card or bank details ourselves.
  • Communication Data: records of correspondence, instructions, and any customer service queries.
  • Technical Data: such as your IP address, browser type, and device information, collected via cookies for site security and analytics.

Lawful Basis for Processing Personal Data

Florist South Tottenham processes your personal data based on one or more lawful grounds under GDPR:

  • Contractual Necessity: Most data is processed to fulfil contracts, such as processing and delivering your order.
  • Legitimate Interests: We may use personal data to manage our business operations, improve our services, detect fraud and ensure site security, provided such interests are not outweighed by your rights.
  • Legal Obligation: Some data may be retained or disclosed to comply with laws and regulations (e.g., tax or anti-fraud obligations).
  • Consent: We will seek your explicit consent prior to using your data for marketing or non-essential purposes, which you can withdraw at any time.

Purposes of Data Collection and Use

Your data may be used for the following purposes:

  • Processing and delivering customers' orders, including communicating with you and recipients.
  • Verifying payment and managing financial records securely via trusted payment processors.
  • Providing customer support, handling enquiries, and resolving issues.
  • Improving our products, services, and website experience.
  • Complying with legal and regulatory obligations.
  • With your explicit consent, sending you special offers, updates or newsletters.

How We Store and Retain Personal Data

Your personal data is securely stored using physical, digital, and operational safeguards. We retain personal data only for as long as necessary for the purposes for which it was collected. Typically, customer account and order data are retained for a period aligned with statutory requirements (up to 7 years for tax or accounting purposes). At the end of the retention period, your data is securely deleted or anonymised.

Data Processors and Third-Party Sharing

In order to provide our services, your data may be processed or stored by trusted third parties, known as data processors, who act strictly on our instructions. These include:

  • Payment Service Providers: to process online payments securely (we do not store your payment card details).
  • IT Service Providers: for website hosting, order management, and security.
  • Delivery Partners: for fulfilling flower delivery and logistics.

All data processors are required to comply with data protection laws and to use your data solely for the purposes specified by Florist South Tottenham. We do not sell or rent personal data to any third party, nor do we permit third parties to use your data for their own marketing purposes.

Your Rights Under GDPR

You have the following key rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
  • Right to Erasure (‘Right to be Forgotten’): You can ask for your personal data to be deleted where there is no legal ground for continued processing.
  • Right to Restrict Processing: You may request restriction of processing under certain circumstances.
  • Right to Data Portability: You can receive your data in a structured format to transfer to another provider if desired.
  • Right to Object: You have the right to object to processing for direct marketing or on grounds relating to your particular situation.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.

Exercising Your Rights

To exercise any of your rights or for questions relating to your personal data, contact us using the details provided on our website or in your order confirmation. We will respond to your request as required under applicable law and may ask for proof of identity to ensure the security of your data.

Data Security

Florist South Tottenham takes appropriate technical and organisational measures to safeguard your personal data, including secure transmission protocols, restricted access controls, data encryption, and staff training. While no method of data security can guarantee absolute protection, we are committed to preventing unauthorised access, disclosure, alteration, or destruction of your data.

International Data Transfers

Your data is primarily stored and processed in the UK. If processing requires transfer to countries outside the UK or EEA, we ensure that adequate safeguards as required by data protection laws are in place, such as standard contractual clauses or transfers to countries deemed to provide an adequate level of protection by relevant authorities.

Children’s Data

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that such data has been provided, we will take steps to delete it promptly.

Policy Updates

This privacy policy may be updated from time to time to reflect changes in legal requirements or our processing activities. You are advised to review this policy periodically. Any significant changes will be highlighted on our website or communicated directly where appropriate.

Contact and Complaints

If you have concerns about our privacy practices or wish to raise a complaint, you are encouraged to contact us through our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.

Thank you for trusting Florist South Tottenham with your personal information. Your privacy and confidence are of utmost importance to us.