Privacy Policy for Customers Ordering from Palmers Green Florist

Introduction

This Privacy Policy explains how Palmers Green Florist collects, processes, stores, and safeguards your personal information in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws. It applies to all customers placing orders with Palmers Green Florist from Palmers Green and surrounding districts. Please read this document thoroughly to understand your rights and our responsibilities regarding your personal data.

What Data We Collect

When you place an order with Palmers Green Florist, we may collect the following categories of personal data:

• Identity Information: Your name, title, and where relevant, business details
• Contact Details: Billing and delivery address, telephone number, and other contact information
• Order Details: Details of products and services you have ordered, order history, and delivery instructions
• Payment Information: Transaction records and payment method, processed via secure payment processors
• Correspondence: Communications with us, including enquiries, feedback, and complaints
• Technical Information: If ordering online, limited data such as IP address and browser type may be collected to support order processing and website security

Lawful Basis for Processing Your Data

Palmers Green Florist only collects and processes your personal data when there is a lawful basis for doing so. Our main lawful bases for processing customer data are:

• Contractual Necessity: Data required to fulfill and deliver your flower orders and services
• Legal Obligation: Data processed to comply with legal or regulatory requirements, such as record-keeping for tax purposes
• Legitimate Interests: Where processing is necessary for our legitimate interests (for example, business analysis or improving our services) and does not override your rights and freedoms
• Consent: Where you have provided clear, informed consent, such as agreeing to receive marketing communications

How Your Data Is Used

Your personal data is used for the following purposes:

• To process and deliver orders, including contacting you regarding your order
• To manage payments, refunds, and prevent fraud
• To maintain business records and comply with legal and regulatory requirements
• To respond to your enquiries, feedback, or complaints
• With your agreement, to send you information about special offers, new products, or floral events
• To analyze usage patterns and improve the quality of our services

Data Retention

Palmers Green Florist retains your personal data only for as long as is necessary for the purposes for which it was collected, including for the fulfilment of your orders, to meet any legal, accounting, or reporting requirements, and where applicable, to manage your preferences for marketing communications. Typical retention periods are:

• Order Information: Retained for up to 6 years from the date of your transaction, in line with UK tax and accounting requirements
• Marketing Data: Retained until you withdraw your consent or opt out of communications
• Correspondence: Retained for as long as necessary to resolve your enquiry or complaint

Once the relevant retention period expires, your personal data will be securely deleted or anonymized.

Data Processors and Third Parties

To fulfil our services effectively, we may share your data with trusted third-party processors and service providers. These include:

• Payment processing providers for secure handling of card transactions
• IT and cloud hosting service providers who support our website and data storage
• Delivery partners and couriers responsible for delivering floral orders
• Professional advisers (such as accountants or legal advisers) if required by law

We ensure that all third-party processors operate in compliance with data protection regulations, provide appropriate safeguards, and only process your information under our direct instruction.

Your data will not be sold, leased, or freely given to any unrelated third parties. Data may be transferred outside the UK/EEA only where necessary and with suitable safeguards in place to protect your information.

Your Data Protection Rights

Under GDPR, all individuals placing orders with Palmers Green Florist in Palmers Green and surrounding districts have the following rights regarding their personal information:

• Right of Access: You may request a copy of the personal data we hold about you
• Right to Rectification: You may request corrections to incomplete or inaccurate data
• Right to Erasure: You may request the deletion of your personal data in certain circumstances, for example if it is no longer needed
• Right to Restrict Processing: You may request restriction of processing if you contest the accuracy of the data or object to our use of it
• Right to Data Portability: You have the right to receive your personal data in a commonly used, machine-readable format
• Right to Object: You can object to processing where we rely on legitimate interests or use your data for direct marketing
• Right to Withdraw Consent: Where consent is our basis, you may withdraw this at any time

Requests relating to your data rights will be responded to within one month, unless the request is particularly complex, in which case we may extend this period and will notify you accordingly. Please be prepared to provide identification before we release personal information.

Policy Updates

This Privacy Policy may be revised from time to time to reflect changes in the law, our data practices, or the nature of our services. The date of the latest update will be stated at the end of this policy. Any significant changes will be communicated through appropriate channels for your information.

Contact and Complaints

If you have concerns about the way your data is handled, or would like to exercise your data protection rights, please contact Palmers Green Florist using the contact methods provided on our website or in-store. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Last updated: June 2024