Flowers New Barnet Privacy Policy: GDPR Compliance & Customer Rights

Introduction

This Privacy Policy explains how Flowers New Barnet collects, uses, stores, and protects your personal information. It is designed to ensure transparency and to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy is applicable to all customers placing orders with Flowers New Barnet for delivery or pickup in New Barnet and surrounding districts.

What Data We Collect

To provide our services, Flowers New Barnet collects and processes the following categories of personal data:

• Identification Data: Name, surname, and title.
• Contact Information: Delivery address, billing address, phone number, and any alternative contact person (e.g. recipient of flowers).
• Order Details: Products ordered, order value, order date, and delivery instructions.
• Payment Information: Transaction data received from payment processors (e.g. payment confirmation, payment method). We do not store or process your full card details in our systems.
• Communication Data: Any correspondence you have with us, including requests, queries, or feedback related to your order.
• Technical Data: When you interact with our website, we may collect anonymised data such as IP address, browser type, and cookies, in order to improve website functionality and user experience. No personally identifying technical data is collected without your consent.

Lawful Basis for Processing Personal Data

We process your personal data according to the lawful bases established under the GDPR:

• Contractual necessity: Most of the personal data we collect is necessary to fulfill and manage your flower order, process payments, arrange deliveries, and provide customer service.
• Legitimate interests: We may use your data for legitimate business purposes, such as improving our services, preventing fraud, or responding to your enquiries, provided these interests do not override your fundamental rights and freedoms.
• Legal obligation: In certain cases, laws or regulations may require us to retain and disclose some information (for example, for tax and accounting compliance).
• Consent: Where we rely on optional features such as marketing communications or cookies not strictly essential to website functionality, we will ask for your explicit consent.

How Your Data Is Used

Your personal data is processed solely for the purposes for which it was collected, which include:

• Processing and fulfilling your flower orders, including delivery and billing.
• Sending order confirmations and delivery notifications.
• Improving our customer service by responding to your comments, questions, and feedback.
• Managing customer complaints and resolving disputes.
• Complying with legal requirements and regulations.

Data Retention

We retain personal data only as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements:

• Order and Customer Data: Retained for up to seven years to comply with tax regulations and to facilitate repeat orders or customer enquiries.
• Communication Data: Retained for up to two years unless required longer by law or for the resolution of disputes.
• Marketing Data: Kept no longer than 12 months after opt-out or withdrawal of consent.

After these retention periods, your data will be securely deleted or anonymised such that it can no longer be associated with you.

Our Data Processors

To operate efficiently, Flowers New Barnet may engage third-party service providers (processors) to process personal data on our behalf. These include:

• Payment processors for secure handling of transactions (e.g. card payments, online payment platforms).
• IT and hosting providers that maintain and support our website, databases, and communication systems.
• Delivery partners for transporting and delivering your orders to the correct address.

All processors are subject to strict contractual requirements to safeguard your data and are only permitted to use it as instructed by Flowers New Barnet in compliance with GDPR.

Your Rights as a Data Subject

Under GDPR, you have various rights regarding your personal data:

• The right to access: Request a copy of the personal data we hold about you.
• The right to rectification: Request corrections to inaccurate or incomplete data.
• The right to erasure: Request deletion of your data under certain circumstances ("the right to be forgotten").
• The right to restrict processing: Request that we limit the processing of your personal data.
• The right to object: Object to the processing of your data based on our legitimate interests or for direct marketing purposes.
• The right to data portability: Request that your data be transferred to another service provider.
• The right to withdraw consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• The right to lodge a complaint: Submit a complaint to the relevant data protection authority if you believe we are processing your data in breach of GDPR.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. These measures include restricted system access, secure data storage, regular reviews, and staff training. While we strive to protect your personal data, please be aware that no method of transmission or storage is completely secure.

Policy Updates

This Privacy Policy is reviewed regularly and may be updated from time to time to reflect changes in the law, our data processing practices, or the services we offer. The updated version will be posted on our website with a revised date. We encourage you to check this page periodically to stay informed about how we are protecting your information.

Applicability

This Privacy Policy covers the collection and processing of personal data from all customers who place orders with Flowers New Barnet, including residents and recipients in New Barnet and the surrounding districts. By placing an order or using our services, you acknowledge and accept the practices described in this policy.