Florist Finsbury Privacy Policy

Introduction

Florist Finsbury is committed to protecting your privacy and managing your personal data with transparency and respect. This Privacy Policy applies to all customers placing orders with Florist Finsbury from Finsbury and the surrounding districts. It explains how we collect, use, store, and share your information, our legal basis for doing so, our data retention practices, and your rights as a data subject under the General Data Protection Regulation (GDPR). By placing an order with Florist Finsbury, you acknowledge that you have read and understood this Policy.

Data We Collect

When you interact with Florist Finsbury, we collect both personal and non-personal data necessary to process and fulfill your order, manage our services, and operate our business lawfully. The types of data we may collect include:

  • Contact Information: Your full name, delivery address, billing address, and contact details such as phone numbers (if provided) and/or postal addresses.
  • Order Details: Information about your order, including choice of products, delivery dates and times, message cards, and special instructions.
  • Payment Information: Payment card details or transaction data collected and processed securely by our payment processors. Florist Finsbury does not store payment card details on our servers.
  • Communication Data: Records of correspondence, feedback, or enquiries you submit to us regarding your order or our services.
  • Technical Data: Your IP address, browser type, operating system, and information regarding your use of our website, collected through cookies or similar technologies. This information helps us enhance our website and services.

Lawful Basis for Processing Your Data

Florist Finsbury processes your personal data under specific lawful bases as outlined by the GDPR, including:

  • Contractual Obligation: To fulfil our contractual duties, such as processing orders, fulfilling deliveries, communicating order status, and dealing with your enquiries.
  • Legal Obligation: To comply with legal or regulatory requirements, such as tax, accounting, and anti-fraud laws.
  • Legitimate Interests: To pursue our legitimate business interests, including improving our products and services, ensuring the security of our website and facilities, and managing customer relationships, provided these interests do not override your fundamental privacy rights.
  • Consent: Where consent is required, for example, for sending certain marketing communications, we will request it explicitly, and you can withdraw your consent at any time.

How We Use Your Data

Your data is used solely for the following legitimate purposes:

  • To confirm, process, and deliver your orders efficiently.
  • To provide customer support, respond to queries, and resolve any issues concerning your orders.
  • To manage payments and prevent fraudulent transactions.
  • To record transactions for legal, regulatory, and accounting compliance.
  • To improve our website, products, and overall service quality, including internal analysis and reporting.
  • With your express consent, to send you promotional information about products or services we believe may interest you.

Data Retention

Florist Finsbury will retain your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy and for the period required by law. Typically, this means:

  • Order and Transaction Data: Retained for up to seven years to comply with tax and accounting requirements.
  • Marketing Information: Retained until you unsubscribe or withdraw your consent.
  • Enquiry and Correspondence Data: Retained for up to two years from the date of your last interaction with us.

After these periods, your data will be securely deleted or anonymized, unless further retention is required by law.

Who Processes Your Data

Your personal information is processed by Florist Finsbury staff and selected third-party service providers (data processors) who assist us in fulfilling and delivering your order, processing payments, managing our website, and providing customer support. These processors are contractually obligated to handle your data securely and only according to our strict instructions in compliance with GDPR. Examples of third-party processors include:

  • Payment processing companies
  • Delivery and courier services
  • Web hosting and IT support providers
  • Providers of business analytics services

Florist Finsbury does not sell your information to any third parties for marketing purposes. If the need arises to share your data with other parties—for example, to comply with legal obligations—we will only do so in accordance with the law and with suitable safeguards.

International Transfers

As a local florist, Florist Finsbury aims to process personal data within the United Kingdom and the European Economic Area (EEA) whenever possible. Where it is necessary for data to be transferred outside these jurisdictions (for example, if a technology provider is based outside the UK/EEA), we ensure adequate protection through contracts and appropriate safeguards as required by GDPR.

Your Data Protection Rights

Florist Finsbury respects your rights under GDPR. You have the following rights in relation to your personal data:

  • Right of Access: You can request confirmation of the personal data we hold about you and receive a copy.
  • Right to Rectification: You can ask us to correct or update inaccurate or incomplete data.
  • Right to Erasure: You may request the deletion of your personal data if there is no lawful reason for us to retain it.
  • Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
  • Right to Object: You can object to the processing of your data where we rely on our legitimate interests, or for direct marketing purposes.
  • Right to Data Portability: You have the right to request that your personal data be provided to you, or transferred to another service provider, in a structured, commonly used format.
  • Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time, without affecting processing previously carried out with your consent.

To exercise these rights, please contact us using the details provided at the end of this Policy. We may need to verify your identity before handling your request, to ensure the security of your data.

Policy Changes

We may update this Privacy Policy from time to time, to reflect changes in our business practices or legal requirements. We will make any new versions available on our website, with the effective date clearly indicated.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us using the contact form available on our website or through other contact options provided. Florist Finsbury aims to address any concerns promptly and transparently, and you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.