Florist Highbury Privacy Policy

Introduction

This Privacy Policy outlines how Florist Highbury collects, uses, stores, and protects personal information from all customers placing orders with us from Highbury and surrounding districts. We are committed to safeguarding the privacy and personal data of our customers in full compliance with the General Data Protection Regulation (GDPR). Please read this policy carefully to understand our practices regarding your information and how we treat it.

What Data We Collect

Florist Highbury collects and processes various categories of personal data in the course of providing floral services to customers. The information we may collect includes the following:

• Contact Details: Names, billing and delivery addresses, phone numbers, and other details required to fulfil your order.
• Order Information: Content of your order, recipient details, delivery instructions, and card messages.
• Payment Information: Payment transaction details (processed securely by third-party payment providers; we do not retain credit or debit card numbers).
• Communication Data: Any correspondence with us, including feedback, queries, complaints, and customer support requests.
• Technical Data: IP addresses, browser types, and access times (collected via our website for functionality and security purposes).

We strive to ensure the data collected is limited to what is necessary for the purposes set out in this policy.

Lawful Basis for Processing Personal Data

Under GDPR, we process your personal data using the following lawful bases:

• Contractual Necessity: Most information we collect is needed to fulfil our contract with you—such as processing, confirming, and delivering your floral order.
• Legal Obligation: Retaining records as required by law, such as for accounting and tax purposes.
• Legitimate Interests: To improve our services, respond to enquiries, or manage business operations in ways that do not override your privacy rights.
• Consent: In cases where you have explicitly agreed, for example to receive marketing or promotional communications. You can withdraw your consent at any time.

How We Use Your Information

Your personal data is used for specific purposes, including:

• Processing and fulfilling floral orders, including payment confirmation and delivery arrangements.
• Contacting you regarding your order or to update you on its status.
• Communicating for customer support, complaint resolution, or feedback requests.
• Meeting legal, accounting, and tax obligations.
• Improving our products and customer experience, and ensuring the security of our website and services.
• Sending marketing communications with your explicit consent.

Retention of Personal Data

Florist Highbury retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations. Generally, this includes retaining order information for up to seven years for accounting and legal reasons. Non-essential data will be deleted or anonymised when it is no longer needed. Retention periods may vary based on statutory requirements or the type of data held.

Data Processors and Third Parties

We rely on carefully selected third-party service providers, known as data processors, to support various aspects of our business. These may include:

• Payment service providers for processing your payment securely.
• Certain outsourced delivery partners to assist in delivering your flowers and gifts.
• IT support, cloud storage, and website hosting providers to ensure reliable business operations and data security.
• Professional advisers (such as accountants or lawyers) if required by law.

All data processors are subject to contracts ensuring that personal data is handled securely, confidentially, and only for purposes they are engaged for, consistent with this policy and GDPR requirements. We do not sell or share your information with outside parties for their own marketing purposes.

Your Rights under GDPR

As a customer of Florist Highbury, you have the following rights relating to your personal data under GDPR:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data when it is no longer necessary or where you withdraw consent, subject to legal exceptions.
• Right to Restrict Processing: Request us to restrict processing if you contest the accuracy, lawfulness, or necessity of data.
• Right to Data Portability: Obtain and reuse your personal data across different services, under certain circumstances.
• Right to Object: Object to our processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this consent at any time.

To exercise these rights, please contact us using the details provided on our website or through your regular point of contact with Florist Highbury. We aim to respond to all legitimate requests within one month and will need to verify your identity prior to actioning any request.

Security of Your Information

We take the security of your personal data seriously. Appropriate technical and organisational measures are in place to prevent unauthorised access, accidental loss, destruction or disclosure of your data. This includes secure servers, restricted system access, and staff training. Where we use third-party processors, we ensure their security standards align with ours and GDPR requirements.

Changes to This Privacy Policy

Florist Highbury may update this Privacy Policy from time to time. Any changes will become effective when published on our website. We encourage customers to review this policy periodically to remain informed about how we are protecting their information.

Applicability

This policy applies to all customers placing orders with Florist Highbury from Highbury and surrounding districts. By using our services, you acknowledge and agree to the practices described in this Privacy Policy.

Contacting Us

If you have any questions, concerns, or requests regarding this policy or your personal data, please contact us through the usual channels presented on our website. We are committed to addressing your enquiries promptly and transparently.