Privacy Notice for Flowers Finsbury Customers

Scope of This Privacy Policy

This Privacy Policy explains how Flowers Finsbury collects, uses, and safeguards personal information received from customers who place orders with us. This policy applies to all customers located in Finsbury and the surrounding districts who interact with Flowers Finsbury, whether placing orders via our website, by phone, or in person.

What Personal Data We Collect

We collect only the information necessary to process and deliver your flower orders and to provide customer service. The categories of personal data we collect include:

• Contact Information: such as your full name, delivery address, billing address, and phone number (if provided).
• Order Details: including items ordered, delivery instructions, recipient details (for delivery recipients), and purchase history.
• Payment Information: such as partial credit or debit card details (the full information is processed securely by our payment processor and not retained by us directly).
• Correspondence: records of communications with you for order confirmation, customer queries, or resolving complaints.
• Technical Information: such as IP address, browser type, and access times to help enhance your experience and for security purposes if placing orders online.

Lawful Basis for Processing Your Data

In accordance with Article 6 of the UK and EU General Data Protection Regulation (GDPR), Flowers Finsbury processes your personal data under the following lawful bases:

• Contract Performance: Most data processing arises from our need to fulfill your order and manage our service relationship (e.g., processing payments, delivering flowers, providing customer service).
• Legal Obligation: Certain information may be required to comply with tax, accounting, and other legal obligations.
• Legitimate Interests: We may process your data to improve our services, prevent fraud, safeguard our business, and send essential delivery updates. Our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we wish to use your data for direct marketing (such as newsletters), we will request your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used strictly to:

• Process and fulfill your flower orders.
• Communicate with you about your order status, or respond to your enquiries.
• Operate, troubleshoot, and secure our online ordering platform.
• Meet legal, accounting, or regulatory requirements.
• Improve our products and services (using anonymised or aggregated data where possible).

Data Retention

Flowers Finsbury retains your personal data only as long as necessary for the purposes for which it was collected, including fulfilling orders and meeting legal or reporting requirements. Specifically:

• Order and billing records are retained for up to seven years to comply with tax and accounting laws.
• Customer service correspondence is kept for up to two years for quality assurance and dispute resolution.
• Marketing consent data (where applicable) is retained for as long as you remain subscribed, and promptly deleted upon withdrawal of your consent.

Your data will be securely deleted or anonymised when it is no longer required for these purposes.

Data Processors and Third Parties

Flowers Finsbury only shares your data with trusted third parties essential to the fulfilment of your order or the running of our business. These include:

• Payment Processors: Secure payment providers facilitate card transactions. Your full card data is never stored by Flowers Finsbury.
• Delivery Partners: Delivery couriers may receive recipient names and addresses to complete delivery.
• IT and Web Service Providers: Providers that host our website, manage our booking systems, back up data, and provide IT support may have limited, secure access to stored data.

All third parties are compliant with GDPR requirements and act only under our instructions. We do not sell or rent your personal data to any third party.

International Data Transfers

Should your data need to be processed outside the UK or EEA, we will ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses or confirming adequacy regulations.

Your Rights Under GDPR

You have several rights in respect of your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no lawful reason for its continued processing.
• Right to Restrict Processing: Ask us to limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used format and transfer it to another provider.
• Right to Object: Object to certain processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time.

We will honor your rights in accordance with the law, and you may contact us to exercise any of these rights. Please note that we may need verification of your identity before actioning requests.

Data Security

Flowers Finsbury applies appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access. Examples include secure web servers, encryption for payment data, restricted access to files, and employee data protection training.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. When significant updates are made, we will provide clear notice via our website or our ordering services before they take effect.

Contact and Complaints

If you have questions concerning how Flowers Finsbury uses your personal information or wish to exercise any of your data rights, please contact us using the details provided within our communication channels, or visit our premises directly. You also have the right to lodge a complaint with the UK Information Commissioner’s Office or your local supervisory authority.