Florist Fitzrovia Privacy Policy

Introduction

This Privacy Policy explains how Florist Fitzrovia collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This policy applies to all customers placing orders with Florist Fitzrovia from Fitzrovia and surrounding districts. We are dedicated to maintaining your privacy and ensuring that your personal data is handled securely and transparently.

What Data We Collect

Florist Fitzrovia collects personal data that is essential for the provision of our services and the fulfillment of your floral orders. The types of data we may collect include:

• Identity Data: Your full name and, if required, your title.
• Contact Data: Delivery address, billing address, recipient name, phone number (if provided), and any alternative delivery information necessary for order fulfillment.
• Order Details: Details of orders you place, such as flower selection, card messages, order instructions, and delivery preferences.
• Payment Data: Payment method details (processed securely by our payment service providers), transaction IDs, but not card numbers or PINs, as we do not store these.
• Communication Data: Communications with Florist Fitzrovia, including customer service inquiries and correspondence regarding orders.
• Technical Data: When you use our website, we may collect technical data such as your browser type, device information, and IP address for security and analytics purposes.

Lawful Basis for Processing

Under GDPR, we must have a valid legal basis to process your personal data. Florist Fitzrovia collects and uses your data based on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill the floral orders you place with us and deliver the requested products or services.
• Legitimate Interests: We may use your data for our legitimate business interests, such as improving service quality, ensuring website security, or managing business operations, provided these interests do not override your rights and freedoms.
• Legal Compliance: We may process your data as required to comply with legal obligations, such as record-keeping and tax regulations.
• Consent: Where applicable, for certain communications such as marketing or promotional contact, we will only process your data with your explicit consent. You can withdraw your consent at any time.

How We Use Your Data

Your personal information is used strictly to provide you with our products and related services. Uses include:

• Processing and delivering your orders accurately and efficiently
• Contacting you regarding your order, delivery updates, or issues requiring clarification
• Maintaining transaction and communication records for business and legal purposes
• Improving our services and understanding customer preferences
• Sending service-related communications, and, if you have opted in, occasional marketing updates
• Ensuring the safety and security of our website and internal systems

Retention of Your Data

Florist Fitzrovia will retain your personal data only for as long as it is necessary to fulfill the purposes we collected it for, including fulfilling orders, accounting, legal, and reporting requirements. We generally retain order-related data for six years for legal compliance and tax purposes. After the retention period, data will be securely deleted or anonymised unless further retention is required by law.

Our Data Processors

We work with trusted third-party service providers (data processors) who assist us in processing your data for specific purposes, such as payment processing, website hosting, and IT maintenance. These processors are contractually obligated to uphold data protection standards in line with GDPR, ensuring confidentiality and security of your personal information. Each processor only processes your data as instructed by Florist Fitzrovia and not for their own purposes.

Examples of common processing activities include:

• Secure payment processing through recognised payment partners
• Cloud hosting and backup of order and customer information
• Website analytics for performance monitoring (anonymised where possible)

We do not sell or rent your personal data to any third parties.

Your Rights Under GDPR

You have the following rights in relation to your personal data held by Florist Fitzrovia:

• Right of Access: You may request access to the personal data we hold about you.
• Right to Rectification: If your information is inaccurate or incomplete, you may ask us to correct or update it.
• Right to Erasure: You can request deletion of your personal data where there is no lawful reason for us to continue processing it.
• Right to Restrict Processing: Under certain circumstances, you may request that we limit how we use your information.
• Right to Data Portability: Where applicable, you may obtain your data for reuse across other services.
• Right to Object: You may object to data processing where it is based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where you have provided consent, you have the right to withdraw it at any time.

We aim to respond to all requests within one month. To exercise your rights, please contact us referencing your specific request and providing any information needed to identify your records.

How We Protect Your Data

We are committed to protecting your information. We use appropriate technical and organisational measures to secure your data, including encryption, access controls, and staff training. While we take all reasonable steps to safeguard your information, no electronic storage or transmission is completely secure. We continually assess and improve our data protection processes to mitigate risks.

Scope and Updates to This Policy

This Privacy Policy covers all customers placing orders with Florist Fitzrovia from Fitzrovia and surrounding districts. We may update this policy from time to time to reflect changes in legal requirements or our processing practices. Updated versions will be posted on our website, and when necessary, we will communicate significant changes to you directly where possible.

Contact and Complaints

If you have questions, concerns, or wish to exercise any of your rights regarding your personal data, you can contact us using the details provided on our website. If you feel your data protection rights have not been upheld, you have the right to lodge a complaint with the relevant data protection authority in the United Kingdom.

We value your trust and are committed to handling your data with care, respect, and transparency at all times.