Finsbury Park Florist Privacy Policy Overview
About This Privacy Policy
This Privacy Policy explains in detail how Finsbury Park Florist ("we", "us", "our") collects, uses, stores, and protects personal data when customers place orders with us from Finsbury Park and the surrounding districts. As a data controller, we are committed to upholding your privacy and rights under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The policy is designed to give you clarity about our data practices and how we safeguard your personal information.
Personal Data We Collect
When you place an order or interact with Finsbury Park Florist, we may collect the following types of personal data:
- Identification Data: Name, delivery address, billing address.
- Contact Data: Telephone number, alternative contact details (as provided).
- Order Data: Details of orders you have placed, including items purchased, dates, recipient details, delivery preferences, and card messages.
- Payment Data: Payment method, partial payment card details (when processed via secure third-party services), and transaction confirmation details. We do not store full payment card numbers.
- Communication Data: Any correspondence with us, such as through contact forms or customer service inquiries.
- Technical Data: Device and browser information, usage data from our website collected via cookies or analytics tools (where consented).
Lawful Basis for Processing Your Personal Data
Under GDPR, we must have a valid legal reason to use your personal data. We rely on one or more of the following lawful bases:
- Contractual Necessity: We process your personal information as required to provide you with florist services and fulfil your orders.
- Legal Obligation: We may process data to comply with laws and regulatory requirements (such as VAT or accounting obligations).
- Legitimate Interests: Where necessary for our legitimate business interests, such as ensuring the efficient operation of our services, improving customer service, or handling necessary business administration. We will always balance these interests with your rights and freedoms.
- Consent: When you have given explicit consent for a specific use of your data (for example, direct marketing by email). You may withdraw your consent at any time.
How We Use Your Information
We use your personal data for the following purposes:
- To process, manage, and deliver your floral orders.
- To communicate with you regarding your order or queries.
- To manage and improve our products, services, and website experience.
- To comply with legal and regulatory obligations.
- For internal business records and accounting purposes.
- To send service-related notifications or updates.
- With your consent, for occasional direct marketing communications relevant to Finsbury Park Florist.
Data Sharing and Processors
To provide you with a seamless service, we may share your data with selected third parties, known as data processors. These may include:
- Payment processing providers: To securely process payments for your orders.
- Delivery partners: Only as necessary to complete deliveries on our behalf in Finsbury Park and surrounding districts.
- IT service providers: For web hosting, storage, and email communications essential to our business.
- Accountancy and regulatory bodies: Where required for compliance or legal reasons.
We have contracts in place with our processors to ensure your data is handled securely, ethically, and only for the intended purpose. We do not sell or trade your personal data for marketing or other purposes. All third parties are required to comply with GDPR obligations.
International Transfers
Finsbury Park Florist aims to keep your personal data within the UK or European Economic Area (EEA). If it becomes necessary to transfer your data outside these regions (for example, through a cloud-based provider), we will ensure suitable protection is in place, such as approved standard contractual clauses or other data protection safeguards.
Data Retention Policy
We only retain your personal data for as long as necessary to fulfil the purposes it was collected for, including legal, accounting, or reporting requirements. Typical retention periods are:
- Order, delivery, and invoicing records: Up to 7 years, in accordance with HMRC and accounting standards.
- General communication or inquiry data: Up to 2 years from the point of last contact.
- Cookies and technical data: As specified in our cookie management policy, usually until consent is withdrawn or the browser cache is cleared.
When the relevant period expires or you request erasure, your data will be securely deleted or anonymised.
Your Privacy Rights
As a Finsbury Park Florist customer, you have the following rights under GDPR regarding your personal data:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data where it is no longer required, subject to legal retention requirements.
- Right to Restrict Processing: Ask us to limit how we use your data under certain circumstances.
- Right to Data Portability: Request transfer of your data to another service provider in a structured, commonly used format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: If our processing relies on your consent, you may withdraw it at any time. This will not affect the lawfulness of previous usage.
If you wish to exercise any of these rights, please contact us. We will respond in accordance with data protection laws and may request certain details to verify your identity before processing your request.
Data Security
We employ appropriate organisational and technical security measures to protect your personal information against unauthorised access, loss, alteration, or misuse. These measures include secure data storage, restricted access procedures, and employee training. While no system can guarantee absolute security, we regularly review our protocols in line with industry best practices.
Updates to This Policy
This Privacy Policy may be updated occasionally to reflect changes in legislation, our services, or data processing practices. Any changes will be included in the updated policy. We encourage you to check this page periodically to stay informed about how we protect your privacy.
Contact and Complaints
If you have any concerns about how your data is handled or wish to make a complaint, you can contact us in writing or in person at our florist shop in Finsbury Park. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.