Finsbury Florist Privacy Policy

Introduction

This Privacy Policy applies to all customers who place orders with Finsbury Florist, whether you are based in Finsbury or any of the surrounding districts. Protecting your personal information and privacy is of utmost importance to us. As a data controller, we comply with the requirements of the General Data Protection Regulation (GDPR) and other relevant legislation. This policy explains what personal data we collect, our lawful basis for processing it, how long we retain your data, our use of data processors, and your rights as an individual.

What Data We Collect

When you interact with Finsbury Florist, we may collect and process the following categories of personal data depending on your activity and the services you use:

• Identity information: Name, title
• Contact information: Delivery address, billing address, phone number, and any other contact details provided during order placement or communications
• Order details: Product selections, special requests, delivery messages, order history
• Payment information: Partial payment information (such as payment method or transaction reference). Full card details are handled securely by our payment processors and are never accessed or stored by Finsbury Florist
• Correspondence: Content of any communications with us, including enquiries and customer service requests
• Technical and usage information: IP address, browser type, time and date of visits, and how you interact with our online platforms (collected via cookies if you use our website)

Lawful Basis for Processing

We only collect and process your personal data where there is a lawful basis to do so. The main lawful bases relevant to our services include:

• Performance of a Contract: When you place an order, we need to process your data to fulfil that order, deliver flowers, handle payment, and provide customer service
• Legal Obligations: We may process your data to comply with legal or regulatory requirements (such as record-keeping and tax obligations)
• Legitimate Interests: Where necessary, we process your data for the legitimate interest of running our business, such as improving our services, fraud prevention, and handling complaints – always balanced against your individual privacy rights
• Consent: In some cases, we may request your consent to process your information, for example, for sending marketing communications. You have the right to withdraw your consent at any time

Data Retention

We only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. In general, we retain order and customer records for a period of up to seven years from the date of your order in order to comply with legal and financial obligations. After this period, your data will be securely deleted or anonymised.

If you have directly requested the deletion of your personal data and there are no ongoing legal reasons to retain it, we will carry out your request as soon as practicable, in accordance with relevant legal requirements.

Sharing and Processors

Your personal information may be shared with trusted third-party providers (data processors) who assist us in delivering our services. These service providers include:

• Payment processing companies (for secure processing of your payments)
• Delivery and logistics providers (to ensure your flowers arrive at their destination)
• IT service and support providers (to host our website and manage communications)

Each third-party processor is contractually obligated to process your data only on our instructions and to maintain appropriate security measures. Finsbury Florist does not sell or rent your personal data to any other organisations.

In certain rare situations, we may be required to disclose your personal data to authorities, regulators, or our legal advisers, where necessary to comply with the law or protect our rights.

International Transfers

Finsbury Florist aims to process all personal data within the United Kingdom or the European Economic Area (EEA) whenever possible. If your data needs to be transferred outside of the UK or EEA for technical reasons, we ensure that adequate safeguards are in place, such as using providers that are subject to appropriate data protection rules.

Your Rights

Under GDPR and relevant data protection law, you have the following rights regarding your personal data:

• Right to Access: Request access to a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request the deletion of your data where there is no longer a lawful reason for us to keep it
• Right to Restriction: Request the restriction of processing in certain circumstances
• Right to Data Portability: Receive your personal data or ask us to transmit it to another controller where technically feasible
• Right to Object: Object to our processing for direct marketing, or on grounds relating to your particular situation
• Right to Withdraw Consent: Where you have given consent, withdraw it at any time

To exercise any of these rights, please contact us using the methods provided on our website or at our premises. We will respond to all legitimate requests within one calendar month, and there is ordinarily no fee unless your request is clearly unfounded, repetitive, or excessive.

Security Measures

Finsbury Florist employs administrative, technical, and physical safeguards to protect the personal information entrusted to us. This includes secure access to systems, encryption of sensitive data in transit, and regular staff training on data protection. While we strive to protect your personal information, please remember that no method of transmission over the internet or electronic storage is completely secure.

Cookies

If you use our website, we may use cookies and similar tools to collect certain technical information and enable basic site functionality. Where required, we will seek your consent for non-essential cookies, and you may adjust your preferences at any time through the settings provided on our website.

Changes to This Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The most recent policy will always be published on our website, with the date of last update clearly shown.

Contact Us

If you have any questions or concerns about this Privacy Policy or about how your personal data is being processed, please get in touch using the contact details available on our website or by visiting our shop.

This policy is effective as of 26 June 2024 and applies to all Finsbury Florist customers in Finsbury and surrounding districts who place orders with us.