Florist Brent Cross GDPR Privacy Policy

Introduction

Your privacy is important to us. As a valued customer of Florist Brent Cross, we are committed to protecting your personal data in line with the General Data Protection Regulation (GDPR) and related data protection laws. This Privacy Policy outlines how we collect, use, protect, and store your information when you place orders with Florist Brent Cross from Brent Cross and surrounding districts. By using our services, you agree to the handling of your data as described in this policy.

Data We Collect

To fulfill your floral orders and provide exceptional customer service, Florist Brent Cross collects a range of information directly from you. The categories of personal data we may collect include:

• Contact Details: Such as your name, billing and delivery address, and contact phone number.
• Order Information: Including product selection, order history, delivery instructions, and payment details (please note, payment information is processed securely by our payment provider and not stored directly by us).
• Recipient’s Details: Name, address, and contact number of the recipient, when different from the customer.
• Communications: Your interactions with us, including feedback, enquiries, and complaints.
• Device and Usage Data: Technical data when you interact with our website, such as IP address, browser type, and cookie data (processed in accordance with our Cookie Policy).

Lawful Basis for Processing

We process your personal data only where we have a lawful basis to do so, as outlined by GDPR. These include:

• Contractual Necessity: To process and deliver your floral orders, communicate order status, and fulfill our contractual obligations.
• Legitimate Interests: For purposes such as improving our services, handling customer enquiries, maintaining business operations, and preventing fraud, provided these interests are not overridden by your rights and interests.
• Legal Obligation: To comply with applicable legal and regulatory obligations.
• Consent: For specific optional uses (such as sending marketing communications), we will obtain your explicit consent in advance. You can withdraw this consent at any time.

Data Retention

Florist Brent Cross retains your personal data only as long as necessary to fulfill the purposes described in this policy, including complying with legal, tax, or regulatory requirements. Typically, order-related data is kept for up to seven years for accounting purposes. Data used for marketing or communication purposes is retained only for as long as you remain subscribed or until you exercise your right to opt out. Once data is no longer required, we take steps to securely erase or anonymise it.

Data Processors and Sharing

In providing our services, we may share certain personal data with trusted third-party processors who act on our behalf. These include:

• Payment Service Providers: For processing payments securely.
• Delivery Partners: To ensure flowers reach the correct recipient in a timely manner.
• IT Service Providers: For hosting, support, and maintenance of our website and data infrastructure.
• Professional Advisers: Accountants, legal, or insurance advisers if needed for compliance and business operations.

All processors are carefully selected and required to adhere to GDPR standards, processing data only per our instructions and for specified purposes. We do not sell or rent your personal information to third parties. Data may be disclosed to regulatory authorities if required by law.

Your Rights

As a customer placing orders in Brent Cross and surrounding districts, you have several important rights under GDPR. These include:

• Right of Access: Request details on the personal data we hold about you.
• Right to Rectification: Request corrections of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data where legally allowed.
• Right to Restrict Processing: Limit the way we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to how we process your data in specific cases, such as direct marketing.
• Right to Withdraw Consent: Withdraw any consent given at any time, without affecting the lawfulness of processing prior to withdrawal.
• Right to Complain: Lodge a complaint with your national data protection authority if you believe your rights have been infringed.

Data Security

Florist Brent Cross implements appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, alteration, or disclosure. This includes secure data storage, access controls, encryption, and regular review of our security practices.

International Transfers

We aim to process and store your data within the UK or European Economic Area (EEA) wherever possible. If your personal data is transferred outside these areas, we ensure appropriate safeguards are in place to maintain its security and integrity, in line with GDPR requirements.

Policy Scope and Updates

This Privacy Policy applies to all customers who place orders with Florist Brent Cross, covering Brent Cross and all surrounding districts served by our business. We may update this policy to reflect company changes, legal requirements, or best practices. Material changes will be communicated where necessary, and the most recent policy will always be available upon request or on our website.

Contacting Us

If you have questions about this Privacy Policy, wish to exercise your GDPR rights, or require further information regarding how we handle your data, please contact us through the provided channels on our website or by post. We are committed to addressing your concerns promptly and respectfully.