Flowers Highbury Privacy Policy

Commitment to Your Privacy

At Flowers Highbury, we are committed to safeguarding your personal information. This Privacy Policy sets out how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (GDPR) and other applicable privacy laws. This policy applies to all customers who place orders with Flowers Highbury from Highbury and surrounding districts.

What Personal Data We Collect

We only collect personal data necessary to process your order and provide our floral delivery services. The data we may collect includes:

• Identity Data: Name and, if applicable, the recipient's name.
• Contact Data: Delivery address (for yourself and/or the recipient), billing address, and methods for contacting you, such as phone number.
• Order Details: Details of the items you ordered and your delivery preferences.
• Payment Data: Payment method details. Please note that payment is handled via secure, third-party processors; we do not store full card details ourselves.
• Communications: Any correspondence that you send to us regarding your order.
• Technical Data: Your IP address and device/browser information, where needed for securing our website and services.

Lawful Bases for Processing Your Data

Flowers Highbury processes your personal data only where there is a lawful basis. The key lawful bases we rely upon are:

• Contract: To fulfil our obligations under the contract formed by your order, such as processing payment and arranging delivery.
• Legal Obligation: To comply with requirements such as tax and accounting regulations.
• Legitimate Interests: For purposes such as improving our services, preventing fraud, and ensuring the security of our operations. We ensure your rights and interests are carefully balanced against these legitimate interests.
• Consent: Where required, for example, if you opt in to receive marketing communications from us, we will always request your explicit consent beforehand. You are free to withdraw consent at any time.

How We Use Your Data

Your data is used solely for the purpose for which it was collected, including:

• Processing and fulfilling your order
• Delivering flowers to the specified address
• Maintaining accurate records for tax and accounting purposes
• Improving the efficiency and security of our service
• Communicating important information about your order, including any updates or issues
• Complying with applicable law and regulatory requirements

Data Processors and Third Parties

We sometimes share your personal data with trusted third parties (known as 'processors') to facilitate our services. These may include:

• Payment Providers: To securely process card or electronic payments.
• Delivery Partners: To ensure your order is delivered to the correct address.
• IT and System Support Providers: For hosting our website and managing data securely.

Where we engage such processors, we require them to comply with strict contractual obligations in line with GDPR, ensuring that your data is only used as necessary to provide the agreed service and is kept secure at all times. Your personal data is not sold or shared with third-party marketers or advertisers.

Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes it was collected for, including any legal, accounting, or reporting requirements. Typically, we will keep:

• Order information (including contact data): up to 7 years to meet our legal obligations for financial records.
• Communication records: up to 2 years following the completion of your order, unless a longer period is required for ongoing customer service or legal reasons.

Once the relevant retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with you.

Your Rights Under GDPR

As a customer of Flowers Highbury, you have certain rights regarding your personal data under the GDPR, including the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of any incomplete or inaccurate information we hold about you.
• Erasure: Request deletion of your personal data where there is no longer a valid reason for us to keep it (subject to legal exceptions).
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Objection: Object to processing where we are relying on a legitimate interest.
• Data Portability: Request that your data be provided in a transferable format to you or a third party.
• Withdraw Consent: If you have provided consent for a specific use (for example, marketing), you can withdraw it at any time, and we will stop that processing.

To exercise any of these rights, please contact us using the details available on our website. We may need to verify your identity before processing your request.

Data Security

Your privacy is extremely important to us. We use a combination of technical and organisational measures to protect your data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. For example, all payments are processed via encrypted connections, and access to your personal data is limited to employees and processors with a business need to know.

Policy Updates and Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or in legal and regulatory requirements. Significant changes will be highlighted on our website. We encourage you to review this policy regularly to remain informed of how we protect your privacy.

Contact and Further Information

If you have any questions about this Privacy Policy or your rights under data protection law, please refer to the contact details provided on our website. We are committed to responding promptly and transparently to all privacy-related enquiries or requests.

This Privacy Policy applies to all customers placing Flowers Highbury orders from Highbury and surrounding districts. Your trust is important to us, and we are committed to handling your information securely, lawfully, and transparently at every step.