Florist Stoke Newington Privacy Notice

Our Commitment to Privacy

Florist Stoke Newington is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you place an order with us, whether online, in person, or over the phone. This policy applies to all customers placing orders from Stoke Newington and surrounding districts. We comply with the UK General Data Protection Regulation (UK GDPR) and relevant UK data protection laws.

What Data We Collect

To fulfil your order and provide you with the best service, we collect the following types of personal data:

  • Identity Information: Name, surname, and title of both the customer and the recipient of flowers.
  • Contact Information: Delivery addresses, billing addresses, phone numbers, and email addresses of the customer and recipient, where provided.
  • Order Details: Products and services ordered, order notes (such as message cards), delivery instructions, and transaction history.
  • Payment Information: Although we may see limited payment information (such as confirmation of payment or method used), sensitive card payment data is processed securely by our payment processor and is not stored by us.
  • Website Usage Data: When you visit our website, we may collect information such as IP address, browser type, device information, and browsing behaviour for analytics and security.

Lawful Basis for Processing Data

Under the UK GDPR, we process your data on the following lawful bases:

  • Contractual Necessity: We process personal data required to fulfil your order, arrange delivery, and provide customer service.
  • Legal Obligation: Some data may be processed to comply with legal requirements, such as record-keeping for tax purposes.
  • Legitimate Interests: We may use your information to enhance our services, prevent fraud, and maintain security, where such interests do not override your privacy rights.
  • Consent: Where consent is required, for example, for direct marketing, we will obtain your clear and explicit permission.

How We Use Your Data

Your data is used to:

  • Process and deliver your orders as requested.
  • Contact you about your order or respond to your enquiries.
  • Improve our services and website experience.
  • Comply with our legal and regulatory obligations.
  • With your consent, keep you informed about our products and special offers.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, including for satisfying any legal, accounting, or reporting requirements. Generally, we keep customer and order information for up to seven years after your last order to comply with HMRC legal requirements for tax and financial records. After this period, your personal data will be securely deleted or anonymised.

Processors and Data Sharing

Florist Stoke Newington uses trusted third-party service providers (processors) to help run our business and deliver your orders, including:

  • Payment Processors: Securely handle payments on our behalf.
  • Delivery Services: Couriers or florists who deliver your order on our behalf.
  • IT and Website Providers: Maintain and support our website and communications systems.
  • Analytics Providers: Assist us in understanding how our website is used, solely for internal purposes.

All data processors are contractually required to handle your personal information in compliance with data protection law, and they are not permitted to use your information for their own purposes. We do not sell your data to any third parties.

International Data Transfers

Your personal data is stored in the UK or within the European Economic Area (EEA) wherever possible. If we ever transfer data outside of the UK or EEA, it will be done with appropriate safeguards to ensure your data is protected, as required by law.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to ask us to correct or update any inaccurate or incomplete data.
  • Right to Erasure: Also known as the “right to be forgotten”, you can request we delete your data when it is no longer necessary for us to keep it, subject to legal requirements.
  • Right to Restrict Processing: You can ask us to suspend processing if you contest its accuracy or our lawful basis for using it.
  • Right to Data Portability: In certain circumstances, you can request your data in a machine-readable format to transfer to another provider.
  • Right to Object: You can object to our processing of your data where we rely on legitimate interests, especially concerning direct marketing.
  • Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided on our website or shop premises. We may request identification to verify your request and will respond within one month as required by law.

How We Protect Your Data

We take your privacy seriously and implement appropriate security measures to protect your data from unauthorised access, accidental loss, or disclosure. These measures include secure servers, data encryption where appropriate, regular staff training, and strict access controls. Only authorised personnel and approved service providers can access your data, solely for the purposes outlined in this policy.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect best practices, legal requirements, or changes in our processes. The latest version will always be available at our premises and on our website. Please check this policy regularly to stay informed about how we protect your privacy.

Contact and Complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us through our contact form or by visiting our shop. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has not been handled lawfully.

Thank you for choosing Florist Stoke Newington. We value your trust and are committed to safeguarding your information at every step.