Totteridge Florist Privacy Policy

Introduction

This Privacy Policy explains how Totteridge Florist collects, uses, stores, and protects your personal data when you place an order with us in Totteridge and the surrounding districts. We are committed to respecting your privacy and safeguarding your data, in accordance with the UK General Data Protection Regulation (GDPR). This policy is intended for all individuals who purchase products or services from us, either online, by phone, or in person.

What Data We Collect

To fulfil your orders effectively and maintain the highest standards of customer service, we collect and process specific information relating to you. Depending on your interaction with Totteridge Florist, the data we may collect includes:

• Contact details: Name, delivery address, billing address, phone number.
• Order information: Details of flowers and gifts ordered, delivery instructions, recipient information (name, address, and occasion details).
• Payment details: Information required to process your payment (such as card information). Please note that we use secure payment processors and do not retain full card details.
• Communication data: Messages you send to us, feedback, and correspondence.
• Website usage data: Information about how you interact with our website, such as IP address, browser type, and time spent on pages (see our separate cookies policy for more details).

Lawful Basis for Processing Personal Data

We process your data only where we have a valid legal basis for doing so, as outlined under GDPR. The primary lawful bases relied upon by Totteridge Florist are:

• Contractual necessity: Data is required to deliver your order, process payments, and provide customer support.
• Legal obligations: We may process your data to comply with applicable law and regulations, such as records for tax and accounting purposes.
• Legitimate interests: For example, personalising your experience or informing you about relevant products and services, provided such interest does not override your fundamental rights and freedoms.
• Consent: In specific cases (e.g., marketing communications), we will seek your explicit consent before collecting or processing your data.

How We Use Your Personal Data

Totteridge Florist uses your personal information solely for purposes related to our business operations, such as:

• Processing your orders, delivering products and services, and providing updates about your purchase.
• Communicating with you about your order status and responding to your enquiries.
• Managing your account, if you have registered one with us.
• Improving our products, services, and customer experience.
• Carrying out fraud checks and ensuring the security of transactions.
• Fulfilling legal and regulatory requirements.
• With your consent, sending occasional marketing information about products, special offers, or promotions, which you may opt out of at any time.

Data Retention

Your personal information will only be retained for as long as it is necessary to fulfil the purposes for which it was collected. In particular:

• Order data and transaction details are retained for as long as required by tax and accounting regulations, generally up to seven years from the date of purchase.
• Contact details and communication records may be stored for up to two years to manage ongoing customer service needs, unless you request deletion sooner and retention is not otherwise legally required.
• Marketing consent will be reviewed periodically. If you withdraw consent, your contact details will be suppressed from marketing lists but retained on a suppression list to prevent further emails.

At the end of the retention periods, your data will either be deleted or anonymised, ensuring it can no longer be associated with you.

Processors and Third Parties

To deliver our products and services, Totteridge Florist may transfer your data to trusted third-party service providers (processors) who operate strictly under our instructions and GDPR standards. Examples of such processors include:

• Payment processing companies for secure card transactions.
• Delivery and courier partners to ensure your order reaches its destination.
• IT and website hosting services necessary to operate our online systems.

All third-party processors are required, by contract, to keep your information confidential and to process it in compliance with data protection law. We do not sell or share your data with any other third-parties for their own marketing purposes.

Your data may only be transferred outside the UK or the European Economic Area (EEA) if adequate protection measures are in place, in line with GDPR requirements.

Your Rights

As a data subject under the GDPR, you have several rights in relation to your personal data, including:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to erasure: You may request that we delete your personal information where there is no lawful reason for its continued processing.
• Right to restrict processing: In certain circumstances, you may ask us to limit how we use your data.
• Right to data portability: Where applicable, you can request we provide your data in a commonly used machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests or to direct marketing at any time.
• Right to withdraw consent: Where we rely on your consent to process data, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, or if you have any concerns about how your personal data is handled, you may contact us directly using the channels indicated at the bottom of this policy or on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data in accordance with the law.

Policy Updates

Totteridge Florist may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. We encourage customers to check this policy regularly to stay informed about how we protect your data. The date of the most recent revision will be posted at the top of this document.

Contacting Totteridge Florist

For general enquiries about this Privacy Policy or your personal data, please refer to the contact section on our website or visit our premises in Totteridge during standard opening hours. Our team is always available to assist with any questions, concerns, or requests relating to your privacy.