Privacy Policy for Haggerston Florist Customers

About This Privacy Policy

This Privacy Policy tells you how Haggerston Florist collects, uses, stores, and shares personal data when you place an order with us. Our services cover customers in Haggerston and the surrounding districts. We are committed to ensuring that your privacy is respected and your data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

What Data We Collect

When you place an order with Haggerston Florist, we may collect and process the following categories of personal data:

Identification and Contact Details: Name, address, phone number, and delivery address, if different from billing address.
Order Details: Information relating to your order, such as floral selections, order notes, card message, delivery instructions, and purchase history.
Payment Information: Payment method details (we do not store full payment card numbers, but our payment processors collect this data securely).
Communication Data: Email correspondences or call records for customer care, complaints, or inquiries.
Website Usage Data: Data about how you navigate and use our website, which may include IP address, browser type, time zone, and cookies.

Lawful Bases for Processing

We process your personal data using one or more lawful bases described by the GDPR:

Performance of a Contract: Most of the data we process is necessary to fulfill your order, process payment, and deliver products as requested.
Consent: In certain situations, such as marketing communications, we rely on your explicit consent. You are free to withdraw this consent at any time.
Legal Obligation: Some data, such as transaction records, are retained to comply with tax or regulatory requirements.
Legitimate Interests: We may use your data to improve our services, prevent fraud, manage our business operations, or provide customer support, provided these uses do not override your rights and freedoms.

How We Use Your Data

We may use your personal data for the following purposes:

Processing your orders, payments, and deliveries
Responding to your inquiries and managing customer service interactions
Sending relevant information about your order's status
Personalizing your shopping experience and providing tailored product recommendations
Fulfilling legal and regulatory requirements
Where you have consented, sending promotional communications

Who Processes Your Data (Processors and Sharing)

We use trusted service providers and third-party partners to help perform our business operations and deliver your orders. The categories of processors we use include:

Payment Processors: To securely process payments on our behalf
Delivery and Courier Services: To ensure your flowers arrive promptly and safely to the delivery address
Email and Communication Platforms: For managing order confirmations and communications with you
IT and Hosting Providers: For website hosting, security, and data storage

Each processor only receives the data necessary for their function and is contractually bound to maintain confidentiality, act only on our instructions, and implement strict data security measures. Personal data will not be sold to third parties.

International Data Transfers

Your data may be processed or stored outside the United Kingdom or European Economic Area if we use third-party providers based elsewhere. In such cases, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to safeguard your rights.

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. For example:

Order and transaction records are typically retained for up to 7 years to comply with tax and accounting regulations.
Contact details used for marketing are held until you unsubscribe or withdraw your consent.
Customer service correspondence is generally retained for up to 2 years after resolution.

We securely delete or anonymise data that is no longer necessary.

Your Privacy Rights

Under the GDPR, you have several important rights in relation to your personal data:

Right of Access: Obtain a copy of the personal data we hold about you.
Right to Rectification: Request correction if you believe any information we hold is incorrect or incomplete.
Right to Erasure: Ask us to delete your data, subject to our legal obligations to retain some information as described above.
Right to Restriction: Ask us to suspend the processing of your personal data in certain circumstances.
Right to Data Portability: Request that we transfer your data to another organisation or directly to you, in a structured, commonly used, and machine-readable format.
Right to Object: Object to our processing of your data where we rely on legitimate interests or direct marketing purposes.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

To exercise these rights, please contact us using the details provided on our website or at our shop premises in Haggerston.

Data Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or damage. This includes secure servers, data encryption where appropriate, and staff training in data protection. We regularly review our security practices to ensure your information remains safe.

Policy Applicability and Changes

This Privacy Policy applies to all customers placing orders with Haggerston Florist in Haggerston and surrounding districts. It does not apply to external websites you may access from our site or to any third-party services unrelated to your order.

We review this Privacy Policy periodically and may update it to reflect changes in practices, technology, or legislation. Changes will be posted on this page, and we encourage you to review it regularly.

Contact and Complaints

If you have any questions about this Privacy Policy or your personal data, please contact us through the contact information provided on our website or visit us at our Haggerston premises. You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about our handling of your information.