Flowers Crouch End GDPR Privacy Policy

Introduction

At Flowers Crouch End, we are dedicated to safeguarding your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers who place orders with Flowers Crouch End from Crouch End and the surrounding districts.

Personal Data We Collect

When you place an order with Flowers Crouch End, you provide us with certain personal information to help us fulfill your request and communicate with you effectively. The data we typically collect includes the following:

• Contact Information: Name, address, and phone number of both sender and recipient
• Order Details: Information about the products and services you purchase
• Payment Information: Limited payment data as handled through secure payment processors
• Delivery Instructions: Any special requirements or accessibility notes related to the delivery
• Communications: Records of communications with our customer service team (for example, requests, complaints, or feedback)
• Technical Data: IP address, device type, and browser information collected when you use our website for analytics and security purposes

Lawful Basis for Processing Data

Under GDPR, we process your personal data only when we have a lawful basis to do so. For Flowers Crouch End orders, our legal grounds include:

• Contractual Necessity: We need your information to process, confirm, and deliver your order and provide customer support.
• Legal Obligation: We may process and retain certain data as required by tax, accounting, or other regulatory requirements.
• Legitimate Interests: We use data to improve our services, secure our website, and communicate with customers about orders or updates. Our interests are balanced with your privacy rights.
• Consent: For marketing communications, we will only contact you if you have given explicit consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal information is used in the following ways:

• Fulfilling and managing your flower order, including processing payments and arranging delivery
• Sending order confirmations, delivery updates, or contacting you regarding your order
• Improving our website, services, and customer experience through feedback and analytics
• Complying with applicable legal requirements and resolving disputes
• Where consent is given, providing information about new products and offers from Flowers Crouch End

How Long We Keep Your Data

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for the fulfillment of your order and compliance with regulatory obligations. In practice:

• Order Information: Kept for up to seven years for tax and accounting purposes, unless a longer period is required by law.
• Customer Service Records: Held for up to three years after the last communication to assist with any follow-up queries.
• Marketing Data: Retained until you withdraw your consent or unsubscribe from communications.
• Website Analytics: Aggregated and anonymised data may be retained longer for business analysis, but it is not personally identifiable.

Data Processors and Third-Party Service Providers

To operate effectively, Flowers Crouch End uses trusted third-party service providers (data processors) who may process your information on our behalf. These include:

• Payment Processors: To securely manage transactions
• Delivery Partners: For local delivery of flowers within Crouch End and nearby areas
• IT and Website Hosting Providers: For website operation and data security
• Analytics and Marketing Services: To help us understand customer needs and preferences

Our partners are carefully selected and contractually required to protect your data in accordance with GDPR standards. They are not authorized to use your data for their own purposes and must act only on our instructions.

Security Measures

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, accidental loss, or misuse. These include encryption, secure servers, access controls, and regular security reviews. Only authorized personnel and trusted processors have access to your data, always under strict confidentiality obligations.

Your Rights Under the GDPR

Under GDPR, you have the following rights with respect to your data:

• Access: You may request a copy of your personal data that we hold.
• Rectification: You can request correction of any inaccurate or incomplete data.
• Erasure: In certain cases, you can ask us to delete your personal data.
• Restriction: You can request that we limit the processing of your data in certain circumstances.
• Objection: You may object to our use of your data for direct marketing or where processing is based on legitimate interests.
• Portability: You have the right to request your personal data in a structured, machine-readable format for transfer to another service provider.
• Withdrawal of Consent: Where consent is the basis of processing, you can withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

If you wish to exercise any of these rights, please write to us using the contact details provided on our website. We respond to all legitimate requests within one month, and sooner if possible.

Children's Privacy

Flowers Crouch End does not knowingly collect or process personal data from children under 16 years of age. If we become aware that the personal data of a child has been collected without appropriate consent, we will take steps to delete such information as soon as possible.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. We recommend checking this page regularly. The latest version will always apply to your use of our services and your relationship with Flowers Crouch End.

How to Contact Us

If you have questions, concerns, or complaints regarding your personal data or this Privacy Policy, you can reach us through the contact information available on our website. We are committed to addressing any issues promptly and transparently.