Privacy Policy for Florist Hampstead Customers

Introduction

This Privacy Policy describes how Florist Hampstead collects, uses, stores, and protects personal data of its customers. The policy is designed to comply with the General Data Protection Regulation (GDPR) and governs the information of all customers placing orders with Florist Hampstead from Hampstead and the surrounding districts. Your privacy and trust are essential to us, and we are committed to handling your data with care and transparency.

Who This Policy Applies To

This Privacy Policy applies to all individuals who interact with Florist Hampstead by placing orders for flowers and related services from Hampstead and surrounding districts. By using our services or placing an order, you acknowledge that you have read and understood this policy.

What Personal Data We Collect

We collect and process the following categories of personal data when you engage with Florist Hampstead:

Identity Data: This includes your name and, where appropriate, the name of a recipient for a delivery order.
Contact Data: Information such as billing and delivery addresses, phone numbers, and (if provided) email addresses.
Order Details: Information about the products you order, delivery instructions, order notes, and any accompanying messages.
Payment Data: While payments are processed by trusted third-party payment processors, we may collect transaction records (excluding full payment card details) and confirmation data.
Technical Data: Information such as IP address, browser type, and device information, which may be collected when you interact with our website. This helps us improve site functionality and security.
Correspondence Data: Any communications you submit to us, including feedback, queries, or complaints.

Lawful Basis for Data Processing

Under the GDPR, we are required to have a lawful basis for processing your personal data. Florist Hampstead processes your data on the following bases:

Contractual Necessity: Most data is processed to fulfill your order and deliver our services, including communicating with you about your order.
Legal Obligation: We may process data to comply with legal or regulatory requirements, such as record-keeping and accounting obligations.
Legitimate Interests: In some cases, we use your data to improve our services, ensure security, and respond to enquiries. Our legitimate interest is to provide a high-quality, secure service, so long as your rights do not override these interests.
Consent: In situations where none of the above bases apply, such as marketing communications, we seek your explicit consent, which you can withdraw at any time.

How We Use Your Data

We use your data for the following purposes:

To process, prepare, and deliver your orders efficiently.
To communicate with you about your order, delivery status, or any issues relating to your service.
For internal record-keeping, accounting, and to comply with legal obligations.
To improve the usability and security of our website and services.
To handle and resolve any complaints or customer service queries.
Subject to your consent, to send you promotional emails or updates that may interest you.

Data Retention

Florist Hampstead retains personal data only as long as necessary for the purposes for which it was collected. Typically, your data is stored for up to six years after your last order to comply with legal obligations and for record-keeping purposes. After this period, your information is deleted or anonymised unless a longer retention period is required by law or necessary for the establishment, exercise, or defence of legal claims.

Data Processors and Third Parties

To provide our services, we may engage trusted third-party partners (data processors) for tasks such as payment processing, website hosting, and delivery logistics. All such processors are carefully vetted for GDPR compliance and are contractually bound to process your data securely and only for the purposes specified by Florist Hampstead. We do not sell or share your data with unrelated third parties for their own marketing purposes.

International Transfers

Your personal data is processed primarily in the United Kingdom. If it is ever necessary to transfer your data outside the UK or European Economic Area, we ensure appropriate safeguards are in place as required by GDPR, such as standard contractual clauses or adequacy decisions.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right of Access: You can request details of the personal data we hold about you.
Right to Rectification: You may ask us to correct any mistakes or incomplete information in your data.
Right to Erasure: You have the right to request deletion of your personal data where there are no legal grounds for its continued processing.
Right to Restrict Processing: You can request that we temporarily suspend the processing of your data in certain circumstances.
Right to Data Portability: You may request that we transfer your data to you or a third party in a structured, commonly used electronic format.
Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.
Right to Lodge a Complaint: If you believe your rights have been violated, you have the right to complain to a data protection authority in the UK.

To exercise any of these rights, please contact us using the methods outlined on our website or via your usual means of communication with Florist Hampstead. We will respond to all legitimate requests promptly and in accordance with applicable law.

Data Security

Florist Hampstead implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. This includes the use of secure servers, encryption, access controls, and regular staff training in data protection.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version is always available on our website and is effective from the date of posting. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or how your information is handled, please refer to the contact information on our website. We are always happy to address your queries and ensure your privacy is protected.