Flowers Stamford Hill Privacy Policy

Introduction

At Flowers Stamford Hill, we are committed to safeguarding the privacy and security of our customers. This Privacy Policy explains how we handle your personal information when you place an order with us in Stamford Hill and the surrounding districts. We follow the UK General Data Protection Regulation (GDPR) and relevant data protection laws to ensure your information is treated lawfully and transparently.

Who Does This Policy Apply To?

This Privacy Policy applies to all customers who place orders with Flowers Stamford Hill, whether through our website, phone, or in-person, within Stamford Hill and the surrounding areas. Please read this policy carefully to understand how your information is collected, used, and protected.

Personal Data We Collect

When you place an order or interact with Flowers Stamford Hill, we may collect the following personal data:

• Identity Data: Name, title, and contact details (delivery address, billing address, and postcode).
• Contact Data: Email address and phone number (where provided) for communications related to your order.
• Order Details: Information about flowers, gifts, messages, and preferences you submit when ordering.
• Transaction Data: Records of your purchases, payment status, delivery instructions, and historical orders.
• Payment Information: Payment card details (collected securely and only processed by approved payment vendors; we do not store full card numbers).
• Technical Data: Your device type, browser information, IP address, and usage data when you interact with our website.

We do not intentionally collect or process any data that could be classed as sensitive, such as health, racial, or religious information.

How We Use Your Data and Our Lawful Basis

Flowers Stamford Hill collects and processes your personal data only where lawful. The primary lawful bases include:

• Performance of a Contract: To process your order, make arrangements for delivery, and communicate order updates.
• Legal Obligation: To comply with UK laws (e.g., tax and accounting requirements).
• Legitimate Interests: To improve our services, resolve queries, or inform you about new products and special offers. When relying on this basis, we balance our interests against your privacy rights.
• Consent: Where you opt-in to receive marketing communications, we seek your explicit consent. You can withdraw your consent at any time.

We will not use your information for profiling or automated decision-making without your knowledge and consent.

Data Retention Policy

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected. Typically, this means:

• Order and Transaction Data: Retained for up to 7 years to comply with tax and accounting regulations.
• Contact Data: Retained for up to 2 years after your last order for customer service purposes unless you ask us to delete it sooner.
• Marketing Data: Retained until you withdraw consent or unsubscribe.

When data is no longer required, it is securely deleted or anonymised.

Processors and Third-Party Data Sharing

To provide our services, we may share your personal data with select third parties or data processors who assist with:

• Payment processing
• Delivery and logistics
• IT support and website hosting
• Customer relationship management and marketing (with your consent)

Whenever we use authorised data processors, we ensure they are contractually required to handle your data only for specified purposes, under strict confidentiality and in compliance with GDPR.

We will never sell or rent your personal information. We also do not transfer your personal data outside the UK or European Economic Area unless appropriate safeguards are in place.

Your Rights Under GDPR

You have the following rights concerning your personal data:

• Right of Access: You may request details of the personal data we hold about you.
• Right to Rectification: If you believe any information we hold is inaccurate, you may ask us to correct it.
• Right to Erasure: You may request we delete your data in certain circumstances (e.g., if the data is no longer necessary for the purpose for which it was collected).
• Right to Restriction: You can ask us to restrict processing of your data in specific cases.
• Right to Data Portability: You can request a copy of your data in a machine-readable format, where applicable.
• Right to Object: You have the right to object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw this at any time.

If you wish to exercise any of these rights, or have questions about your data, please contact Flowers Stamford Hill using our published contact methods. We may require identification to confirm your request. We aim to respond within one month, in line with legal requirements.

Protecting Your Data

Your personal information is protected by a combination of physical, electronic, and managerial procedures. We use secure servers, access controls, and staff training to minimise the risk of unauthorised access, disclosure, loss, or destruction of your data. While we work hard to protect your data, transmission over the internet is not completely secure, so please be careful with your own information.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal obligations. The most recent version will always be available on our website and is effective immediately upon posting. Please check periodically for updates to ensure you remain informed.

How to Raise Concerns

If you are dissatisfied with how we handle your personal data, please advise us so we can investigate and resolve your issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) should you feel your rights have not been upheld.

Thank you for trusting Flowers Stamford Hill with your personal information. Your privacy and satisfaction are our priority.