Hackney Marshes Florist Privacy Policy
Introduction
Your privacy is important to us at Hackney Marshes Florist. We are committed to protecting your personal information and ensuring transparency in how we process and manage your data. This Privacy Policy outlines the types of information we collect, how we use and safeguard it, and your rights under the General Data Protection Regulation (GDPR). The policy applies to all individuals placing orders with Hackney Marshes Florist in Hackney Marshes and surrounding districts.
What Data We Collect
We collect personal information to provide and improve our services. The types of information we may collect include:
- Identification Information: Name, surname, and title.
- Contact Details: Delivery and billing addresses, phone numbers, and, where provided, email addresses.
- Order Information: Details of the products/services purchased, order notes, recipient information (such as recipient name and address), preferred delivery date and time, and any personalized messages.
- Payment Information: Transaction and payment method details (please note, we do not store credit or debit card numbers – these are securely processed by our payment processors).
- Communication Records: Any correspondence or communication with us, including inquiries, feedback, and complaints.
- Website Usage Data: Data collected via cookies or analytical tools when you use our website, such as IP address, browser type, and browsing activity.
Lawful Basis for Processing Data
Under the GDPR, we must have a lawful basis to process your personal data. Our processing activities rely on the following grounds:
- Performance of a Contract: To fulfil your flower order or other requests.
- Legal Obligation: To comply with our legal or regulatory requirements, such as maintaining financial records for tax purposes.
- Legitimate Interest: To improve our services, manage customer relationships, and protect against fraud or misuse of our services, provided these do not override your rights.
- Consent: Where required (such as for marketing communications), we process your data with your explicit consent. You may withdraw consent at any time.
How We Use Your Data
We use your personal data for the following purposes:
- To process and manage your orders, including arranging delivery and providing customer support.
- To communicate with you about your order status, respond to inquiries, and resolve complaints.
- To fulfil legal and regulatory obligations.
- To conduct statistical analysis and improve our products and services.
- For internal administrative purposes, including accounting and record-keeping.
- If you provide consent, to send you updates or marketing related to our products and special offers (you can opt-out at any time).
Sharing Your Data: Processors and Third Parties
Your data may be shared with third-party service providers ('processors') who assist us in delivering our services. These include:
- Payment service providers for secure processing of transactions;
- Delivery services to ensure your order reaches the intended recipient;
- IT and cloud service providers for secure hosting, backup, and maintenance of our systems;
- Professional advisors (e.g., accountants) where necessary for our legitimate business purposes;
- Regulatory authorities or law enforcement where required by law.
All processors are contractually obligated to protect your information and use it only for providing their services to us. We do not sell or rent your data to other organizations.
Data Retention
We retain your personal data only as long as is necessary for the purposes described in this policy:
- Order and transaction records: Retained for at least six years after your last order to comply with accounting and legal requirements.
- Customer correspondence: Retained for two years after resolution.
- Marketing data: Retained until you withdraw consent or opt out of further communications.
Once data is no longer required, it will be securely deleted or anonymized unless further retention is required by law.
How We Safeguard Your Data
We implement appropriate technical and organizational measures to protect your personal data, including encryption, regular system monitoring, and access restrictions to limit data to authorized personnel only. Our policies are regularly reviewed to ensure data security and compliance with GDPR standards.
Your Rights Under the GDPR
Under data protection laws, you have the following rights regarding your personal data:
- Right to Access: You can request details of the personal information we hold about you.
- Right to Rectification: You can ask us to correct any inaccuracies or incomplete data.
- Right to Erasure: You may request the deletion of your data where appropriate.
- Right to Restrict Processing: You may ask us to limit our processing of your data in certain circumstances.
- Right to Data Portability: You can request to receive your data in a structured, machine-readable format, or transfer it to another service provider.
- Right to Object: You can object to processing based on legitimate interests or direct marketing at any time.
- Right to Withdraw Consent: Where we rely on consent, you can withdraw this at any time.
How to Exercise Your Rights
To make a request or to exercise any of your rights, please contact us using the contact details provided on our website or in store. We will respond to your request as soon as possible, and in any case within one month. If you are dissatisfied with how we handle your data, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The most current version will always be available on our website, and we encourage you to review this policy periodically.
Applicability
This policy applies to all customers who place orders with Hackney Marshes Florist for delivery in Hackney Marshes and neighbouring districts. By placing an order or using our services, you acknowledge and agree to the terms outlined in this Privacy Policy.