Our Commitment to Your Privacy at Florist Dollis Hill

Introduction

Florist Dollis Hill is committed to ensuring the privacy and security of all our customers. This Privacy Policy sets out how we collect, use, store, and protect your personal information when you place an order with us, whether from Dollis Hill or surrounding districts. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Please read this policy carefully to understand our views and practices regarding your personal data and how we treat it.

Scope of This Policy

This Privacy Policy applies to all individuals who place orders with Florist Dollis Hill, regardless of whether the order is placed online, over the phone, or in person. It covers customers residing in Dollis Hill as well as the surrounding districts.

Types of Data We Collect

To fulfill your orders and provide high-quality services, we collect the following types of personal data:

• Contact Information: Your name, delivery address, billing address (if different), phone number, and other contact details provided at the time of placing your order.
• Order Details: Items ordered, delivery instructions, recipient name and address, preferred delivery time, and any specific notes or gift messages you may provide.
• Payment Information: Card details or payment method information, which are processed securely via our payment partners. We do not store your full card details.
• Communication Records: Correspondence via email, letters, or notes regarding your order or customer service inquiries.
• Technical Data: IP address, browser type, device details, and information obtained via cookies, where applicable, when you visit our website.

Lawful Basis for Processing Your Data

We process your personal data lawfully on the following grounds, as per GDPR:

• Contractual Necessity: We use your data to fulfill our contract with you, including processing your order, arranging delivery, and administering payments.
• Legitimate Interests: We may use your information for our legitimate business interests, such as improving our services, addressing customer queries, or ensuring the security of our transactions, provided that your interests or fundamental rights are not overridden.
• Legal Obligations: We process information when required to comply with legal obligations, such as retaining transaction records for accounting and tax purposes.
• Consent: In cases where we send you marketing communications, we will only do so with your explicit consent. You may withdraw consent at any time.

How We Use Your Data

Your data is used for the following purposes:

• Processing and delivering your floral orders and related services.
• Contacting you in relation to your order, delivery, or feedback.
• Handling customer support or complaints efficiently.
• Ensuring our website and services are secure and user-friendly.
• Where permitted, sending promotional materials or updates about our services (always with your explicit consent).

How Long We Keep Your Data (Data Retention)

We retain your personal data only for as long as is necessary to fulfill the purposes described above, and in accordance with legal and regulatory requirements. Typically, this means:

• Order Data and Communications: Retained for up to six years from the date of your last order, to comply with tax, accounting, and legal requirements or in case of disputes.
• Marketing Data: If you have given consent for marketing, your information is retained until you withdraw consent or request deletion.
• Technical Data: Data collected via cookies is retained according to our cookie policy and for periods necessary to fulfill analytics or security purposes.

Third Parties and Data Processors

We work with trusted third-party service providers (data processors) to facilitate our operations. These may include:

• Payment processing companies for secure financial transactions.
• Delivery partners who help us fulfill your orders and deliver flowers to the correct recipient.
• IT and web service providers who host our website or assist in its functionality.
• Professional advisors, such as accountants or legal consultants, where required.

All processors are bound by contractual obligations to protect your data and use it only for the agreed purposes. We do not sell, rent, or trade your personal information with third parties for marketing purposes.

Your Rights Under GDPR

As a data subject, you have the following rights in relation to your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct or complete any inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, subject to any legal obligations that require us to retain certain information.
• Right to Restrict Processing: You may ask us to restrict or suppress the processing of your data in certain circumstances.
• Right to Data Portability: You have the right to receive your data in a commonly used and machine-readable format and transmit it to another data controller.
• Right to Object: You may object to certain types of processing, including direct marketing.
• Rights in Relation to Automated Decision-Making: You have rights related to automated processing or profiling; however, we do not conduct automated decision-making with legal or significant effects.

To exercise any of these rights, please contact us using the details provided on our website. We may need to verify your identity before responding to your request.

Security Measures

We implement appropriate technical and organizational measures to safeguard your personal data. This includes regular security reviews, staff training, secure storage, and restricted access to sensitive data. While we do our best to protect your personal information, no system is completely secure; therefore, we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and, where appropriate, notified to you. Please check back periodically to remain informed about how we protect your information.

Contact and Further Information

If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise your rights, please refer to our website for current contact details and procedures.