Crouch End Florist Privacy Policy

Introduction

This Privacy Policy applies to all customers who place orders with Crouch End Florist, whether from Crouch End or the wider surrounding districts. We are fully committed to protecting your personal data and ensuring transparency about how we handle it in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws in the United Kingdom.

What Data We Collect

As part of providing our floral arrangement and delivery services, we collect and process certain categories of personal data from our customers. This data is limited to what is necessary to fulfil your order and deliver a high-quality service. The types of personal data we may collect include:

• Contact Information: Name, address, phone number, and delivery address (including recipient’s name and address if differing from the customer).
• Order Details: Products and services you order, order notes, and preferences you specify.
• Payment Information: Payment card details (processed securely via accredited payment processors), billing address, and transaction records. We do not store your full payment card details after the transaction is completed.
• Communication Data: Any communications, feedback, or correspondence you send to us regarding orders or queries.

We do not intentionally collect sensitive personal data (special categories of data) unless specifically provided for a clear purpose related to your order (e.g., specific instructions or requests).

Lawful Basis for Processing

Under the GDPR, we are required to have a lawful basis for processing your personal data. Outlined below are the legitimate reasons we process your data:

• Contractual necessity: Most of the personal data we collect is necessary to perform our contract with you (i.e., to process, fulfil, and deliver your order).
• Legal obligations: We may process and retain certain records as required by law, such as tax or business records.
• Legitimate interests: We may process your data for purposes such as responding to your communications, analysing customer satisfaction, improving our services, and preventing fraud, provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent (for example, for direct marketing or to process optional personal data), you have the right to withdraw it at any time.

How We Use Your Data

We use the personal data you provide only for the following purposes:

• Processing and fulfilling your flower orders, including arranging delivery to you or your nominated recipient.
• Managing payments and issuing invoices or receipts as necessary.
• Providing customer service and responding to your requests or enquiries.
• Administering our business, including maintaining records for accounting and taxation.
• Improving our service through quality assurance and customer feedback.
• Complying with legal or regulatory obligations.
• Where you have consented, sending you information about offers, new products, or updates about Crouch End Florist.

Retention of Your Data

We retain your personal data only as long as necessary for the purpose it was collected, including to meet legal, regulatory, tax, accounting, or reporting requirements. The specific retention periods are as follows:

• Order records and associated personal data are retained for up to six years following your purchase, in compliance with legal tax record obligations.
• If you have contacted us with an enquiry but have not made a purchase, we will retain your correspondence for up to two years.
• Data used for marketing purposes, where you have provided consent, will be retained until you withdraw your consent or unsubscribe.

At the end of the applicable retention period, your data will be securely deleted or anonymised.

Data Processors and Sharing

We use third-party service providers (data processors) solely to help us deliver our services to you. These may include:

• Payment processing providers (handling card payments securely).
• Delivery partners (facilitating flower deliveries across Crouch End and nearby areas).
• IT and systems support, including secure cloud data storage and website hosting.

We require all processors to respect the security of your personal data and to treat it in accordance with the law. They are not allowed to use your personal data for their own purposes or share it without authorisation. We do not sell or otherwise disclose your information to third parties for marketing purposes.

International Data Transfers

All personal data is processed within the United Kingdom. Should any transfer of your data outside the UK be necessary (for example, cloud service providers), we will ensure the appropriate legal safeguards are in place to protect your information in line with GDPR.

Your Rights Under GDPR

As a customer placing orders with Crouch End Florist, you have the following legal rights regarding your personal data:

• Right to access: You can request access to a copy of the personal data we hold about you.
• Right to rectification: You may request we correct incorrect or incomplete personal data.
• Right to erasure ("right to be forgotten"): In certain situations, you can request deletion of your personal data.
• Right to restriction: You can ask us to restrict the processing of your data in certain circumstances.
• Right to data portability: You may request the transfer of your personal data to a third party.
• Right to object: You can object to our processing where we rely on legitimate interests or direct marketing.
• Right to withdraw consent: If we process your data based on consent, you have the right to withdraw your consent at any time.

To exercise your data protection rights, please contact us using the contact details on our website or at our shop. We will respond to all legitimate requests within one calendar month.

Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information from accidental loss, unauthorised access, use, alteration, or disclosure. Examples include secure payment systems, staff confidentiality agreements, and regular review of our data handling practices.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. Please review this policy periodically for updates. The most current version will always be available in-store and on our website.

Contact Us

If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise your rights, please contact our team in person at our Crouch End shop or via our website's contact form. We strive to address all enquiries quickly and efficiently.