Privacy Policy for Florist Harrow Weald Customers

Introduction

This Privacy Policy describes how Florist Harrow Weald collects, uses, stores, and protects your personal data when you place orders with us. It applies specifically to all customers placing orders with Florist Harrow Weald from Harrow Weald and the surrounding districts. We are fully committed to complying with the General Data Protection Regulation (GDPR) and local data protection laws to safeguard your personal information and privacy rights.

What Data We Collect

Florist Harrow Weald collects only the data necessary to process your orders, provide customer service, and fulfil legal obligations. The categories of personal data we may collect include:

• Identification Information: First and last name
• Contact Information: Delivery address, billing address, postcode, telephone number (if provided), and where relevant, the recipient's name and address
• Order Information: Details of bouquets or gifts ordered, special instructions, and delivery preferences
• Payment Information: Transactional data (note: we do not store full payment card details. These are processed securely by our payment service providers)
• Communication Records: Correspondence, requests, complaints, or feedback provided to us
• Technical Data: IP address, browser type, and device information (when using our website)

We do not collect or process any special category (sensitive) personal data unless it is required by law or you have expressly provided it for a specific purpose relating to your order.

The Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for each type of personal data processing we perform. Our lawful bases include:

• Contractual Obligation: Most data we collect is necessary to process and deliver your order or to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Legal Obligation: We may process your data to comply with applicable laws, such as those relating to taxation and accounting (Article 6(1)(c) GDPR).
• Legitimate Interests: At times, we may process data for legitimate business reasons, such as improving our services or managing our relationship with you, provided your rights do not override these interests (Article 6(1)(f) GDPR).
• Consent: Where required, for example, for marketing communications (if and when offered), we will only process your data if you have given clear consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time.

How We Use Your Data

Florist Harrow Weald uses your data in the following ways:

• To process, prepare, and deliver your floral order accurately to the specified recipient
• To communicate with you regarding your order status, deliveries, or any issues needing resolution
• To respond to your enquiries, requests, or complaints
• To meet legal and regulatory obligations, such as maintaining accurate records for accounting or tax purposes
• To improve our customer service and the efficiency of our operations

Data Retention: How Long We Keep Your Information

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, accounting, or reporting requirements. Typically, we retain order and transaction data for a period of six years from your last interaction, in accordance with statutory requirements for financial record-keeping. Communication records are generally retained for up to two years, unless required longer for dispute resolution or customer support purposes. Once the relevant retention period has expired, your data will be securely deleted or anonymised.

Data Processors and Third-Party Access

Florist Harrow Weald employs carefully selected third-party service providers (data processors) to perform certain functions on our behalf, including:

• Payment service providers: For secure processing of payments without storing full card details on our systems
• Delivery partners: To ensure timely and accurate delivery of your order to the intended recipient
• IT and website support services: For the hosting, maintenance, and security of our website and databases
• Accountancy and compliance professionals: For legal, financial, and regulatory requirements

All processors are contractually required to protect your data and act only under our instructions. We do not share, sell, or rent your personal information to unaffiliated third parties for marketing or other non-essential purposes.

Your data will not be transferred outside the United Kingdom or the European Economic Area unless adequate safeguards are in place as required by law.

Your Data Protection Rights

You have the following rights regarding your personal data under applicable law:

• Right to Access: You may request access to a copy of your personal data we hold.
• Right to Rectification: You have the right to request correction of incomplete or inaccurate data.
• Right to Erasure ('Right to be Forgotten'): You can ask us to delete your personal data under certain circumstances.
• Right to Restrict Processing: You may request limited processing of your data where applicable.
• Right to Data Portability: In relevant cases, you can request a copy of your data in a commonly used electronic format.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing (if in use).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time.

To exercise your rights, please contact us using the methods detailed on our website. For your protection, we may need to verify your identity before complying with your request. We aim to respond to all legitimate requests within one month.

Security of Your Data

We take the protection of your personal data very seriously. Florist Harrow Weald implements appropriate technical and organisational measures to safeguard your information against accidental loss, unauthorised access, disclosure, or alteration. These measures include secure IT systems, staff training, and data minimisation policies. While we strive to use commercially acceptable means to protect your information, no method of transmission or storage can be guaranteed as completely secure.

Policy Updates

This Privacy Policy may be updated from time to time to reflect legal, technical, or operational changes. The latest version will always be available on our website, with the "last updated" date shown at the top. We encourage you to review this policy regularly to stay informed about our privacy practices.

Contact and Complaints

If you have questions about this Privacy Policy, your data, or wish to exercise your rights, please use the contact details provided on our official website. If you are dissatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.