Privacy Policy for Finsbury Flowers Customers

Introduction

At Finsbury Flowers, we are committed to protecting the privacy and personal data of our valued customers. This Privacy Policy outlines how we collect, use, safeguard, and manage your information in full compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Finsbury Flowers in Finsbury and surrounding districts. Please read this policy carefully to understand your rights and our responsibilities regarding your personal data.

What Data We Collect

When you place an order with Finsbury Flowers, we may collect the following categories of personal data:

  • Identity Data: Your full name and, when relevant, the recipient’s name.
  • Contact Data: Your home/business address, delivery address, and telephone number (where required for delivery).
  • Order Details: Information about your order, including product selection, card messages, delivery instructions, and order history.
  • Payment Data: Transaction details, such as payment method (we never store full credit/debit card details).
  • Communication Data: Correspondence between you and us, including feedback, complaints, or queries.

Lawful Basis for Processing Your Data

Under GDPR, we process your data only where we have a valid lawful basis. The main lawful bases applicable to Finsbury Flowers are:

  • Contractual Necessity: We need to use your data to fulfil your orders, deliver products, and provide related customer support.
  • Legal Obligation: In some cases, we are required by law to retain certain information for tax or accounting purposes.
  • Legitimate Interests: We may process your data to improve our services, prevent fraud, or for internal record-keeping, provided these interests do not override your rights.
  • Consent: For any direct marketing or promotional communications, we will seek your explicit consent before using your data for this purpose. You may withdraw consent at any time.

How We Use Your Personal Data

We use your personal data exclusively for the following purposes:

  • To process and fulfil your flower orders, including delivery and handling any queries or complaints.
  • To maintain accurate records and manage invoices or receipts.
  • To communicate with you regarding your order status or special delivery arrangements.
  • To enhance and personalise your customer experience.
  • To comply with legal and fiscal obligations.

How Long We Keep Your Data (Data Retention)

We retain your personal data for only as long as necessary to fulfil the purposes outlined above and comply with any legal obligations. Typically, your order and associated details are retained for up to seven years to meet accounting and tax requirements, unless a longer or shorter retention period is required by law. After this period, we securely delete or anonymise your data.

Processors and Third Party Data Sharing

We may share your data with trusted third-party service providers who process data on our behalf, including:

  • Delivery and courier partners to ensure your order is delivered accurately and on time.
  • Payment processing agencies to securely handle your transactions.
  • Information technology providers who support our order management and security systems.

We ensure that any data shared with third-party processors is protected under strict contractual agreements and is only used for the purposes stated in this Policy. We do not sell, rent, or trade your personal information to external entities for marketing purposes.

Data Security

We take data security seriously and have adopted comprehensive measures to protect your information from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures include access controls, regular staff training, encryption, and secure data storage protocols. Only authorised personnel with a legitimate business need are allowed to access your personal data.

Your Rights as a Data Subject

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may ask us to correct any incorrect or incomplete information.
  • Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to certain legal obligations.
  • Right to Restrict Processing: In certain circumstances, you may restrict how we use your data.
  • Right to Data Portability: You may request your personal data in a structured, commonly used format for transfer to another provider.
  • Right to Object: You may object to the processing of your data in certain situations, such as direct marketing.
  • Right to Withdraw Consent: If we process your data based on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the contact methods available on our website, and we will respond within one month in most cases.

International Data Transfers

Finsbury Flowers generally processes personal data within the United Kingdom and European Economic Area (EEA). Should it become necessary to transfer your data outside the EEA, we will ensure that appropriate safeguards are in place in accordance with GDPR requirements to protect your rights and data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities or legal obligations. The most current version will always be available on our website. We encourage you to review this policy periodically for any updates.

Contact & Complaints

If you have questions regarding this Privacy Policy, how we handle your data, or wish to make a complaint, please contact us using the contact details provided on our website. If you are unsatisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your national data protection authority.

Policy Scope

This Privacy Policy applies to all customers placing orders with Finsbury Flowers within Finsbury and surrounding districts. By using our services and providing your personal data, you acknowledge that you have read and understood this Policy.

Thank you for entrusting Finsbury Flowers with your personal information. We remain committed to respecting your privacy and ensuring your data is handled safely and lawfully at all times.