North Finchley Florist Customer Data Privacy Policy
Introduction
At North Finchley Florist, we value your privacy and are committed to complying with the General Data Protection Regulation (GDPR) and all other relevant data protection legislation. This policy explains how we collect, use, store, and protect your personal information when you place an order with us, whether as a customer in North Finchley or in the surrounding districts. Please read this privacy policy carefully to understand your rights and our obligations when handling your data.
Scope of This Policy
This Privacy Policy applies to all customers who place orders with North Finchley Florist from North Finchley and its nearby districts. It outlines how personal data provided to us through our website, over the phone, or in person at our store is processed, stored, and safeguarded, and details your rights regarding this information.
What Data We Collect
To provide you with our floral products and services, North Finchley Florist collects and processes the following types of personal data:
- Identification information: Name, title
- Contact details: Postal address, delivery address, phone number (optional), and (where provided) email address
- Order details: Items purchased, delivery dates, recipient information (name, delivery address, special delivery instructions)
- Payment information: Card details and payment confirmation, processed securely via payment gateways
- Correspondence: Any information you provide in emails, notes, or telephone conversations relating to your orders
We do not, under any circumstances, collect or store sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless required by law or unless you have expressly provided such information for a specific purpose related to your order (e.g. medical allergies for safe flower delivery).
Lawful Basis for Processing Your Data
North Finchley Florist processes your personal data based on the following lawful bases under GDPR:
- Contractual Necessity: Most data we collect is required to process, fulfill, and deliver your order, as well as to communicate with you regarding your purchase.
- Consent: For optional uses, such as direct marketing or promotional emails, we only process your data if you have given explicit consent, which you may withdraw at any time.
- Legitimate Interests: We may process your information for legitimate business purposes, such as improving our services or handling customer queries and complaints, provided these interests are not overridden by your rights and freedoms.
- Legal Obligation: Certain information may be processed to comply with legal requirements, such as record-keeping for tax purposes or fraud prevention.
How We Use Your Personal Data
Your information is used for the following purposes:
- To process and deliver floral orders
- To contact you about your order or delivery
- To respond to queries, requests, or complaints
- To issue invoices, receipts, or other relevant transaction documents
- For internal business analysis, auditing, and service improvement
- To send marketing communications if you have opted in to receive them
Data Retention and Storage
North Finchley Florist will retain your personal data only as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Typically:
- Customer order records and associated communication are retained for a period of up to six years to comply with legal and accounting obligations, unless you request deletion sooner, provided no overriding legal obligations apply.
- Payment information is never stored by North Finchley Florist; it is managed securely by trusted third-party payment providers.
- If you have opted in to marketing communications, your contact information will be retained until you unsubscribe or withdraw consent.
Third-Party Data Processors
To provide our services efficiently and securely, we may share your data with trusted data processors who act on our behalf, including:
- Payment providers to process transactions safely and securely
- Delivery services to dispatch your order to the recipient
- IT service providers who support our ordering system and store data securely
- Professional advisors for accounting, legal, or compliance matters
All third-party data processors are contractually required to process your information in accordance with GDPR and to use it only for the specified purpose. We do not sell or share your personal data for unrelated marketing or commercial purposes.
Your Rights Under GDPR
As a customer, you have the following rights regarding your personal data:
- Right of Access: You may request access to your personal data held by North Finchley Florist.
- Right to Rectification: You can request correction of inaccuracies in your personal information.
- Right to Erasure: You have the right to request deletion of your data, subject to any legal retention requirements.
- Right to Restrict Processing: In certain cases, you may request us to stop processing your data.
- Right to Data Portability: You may request a copy of your data in a digital format for transfer to another provider.
- Right to Object: You may object to direct marketing or to processing based on our legitimate interests.
- Right to Withdraw Consent: If we process your data based on consent, you may withdraw it at any time.
- Right to Lodge a Complaint: If you believe your rights have been infringed, you can lodge a complaint with the relevant data protection authority.
Data Security
We have implemented appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These safeguards include secure servers, encryption techniques, access restrictions, and staff training. Our systems and procedures are regularly reviewed to ensure ongoing security of your data.
Changes to This Privacy Policy
North Finchley Florist may update this Privacy Policy periodically to reflect changes in data protection legislation or our business practices. Any significant changes will be brought to your attention via our website or other appropriate means. The most current policy will always be available on our premises and our website for your review.
Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, you can contact us by visiting our store in North Finchley or through our website's contact form. We will endeavor to respond to your queries as promptly as possible.