Privacy Policy for Flower Delivery Highgate Customers

Introduction

This Privacy Policy describes how Flower Delivery Highgate (“we”, “our”, or “us”) collects, uses, stores, processes, and protects the personal data of our customers who place orders in Highgate and surrounding districts. Our commitment is to ensure your privacy in alignment with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Scope of This Policy

This policy applies to all individuals who place orders with Flower Delivery Highgate, whether online, over the phone, or at our physical location in Highgate and its surrounding districts. It encompasses all personal data collected, stored, and processed as part of delivering our flower arrangements and related services.

Types of Data We Collect

We collect the following categories of data, which may be provided directly by you or obtained through use of our services:

• Identification Information: Name, delivery address, billing address
• Contact Information: Phone number, email address
• Order Details: Items ordered, delivery instructions, payment method (we do not store full card details)
• Recipient Information: Name, address, and phone number (if different from the customer)
• Communications: Correspondence with our customer service team
• Technical Data: IP address, order timestamps, and device type (when ordering online)

Lawful Basis for Processing Data

Flower Delivery Highgate processes your personal data in accordance with the following lawful bases as defined by the GDPR:

• Contractual Necessity: Most data is processed to fulfill an order you have placed, including processing payment, arranging delivery, and communicating with you regarding your purchase.
• Legitimate Interests: We may use your data to improve services, prevent fraud, and respond to enquiries, where such interests do not override your fundamental rights and freedoms.
• Legal Obligation: Certain data, such as transaction records, may be retained to comply with legal and regulatory requirements.
• Consent: Where applicable, such as for direct marketing communications, we will obtain your clear consent before processing your data for these purposes.

How We Use Your Data

We use your information for the following purposes:

• Processing and delivering your flower orders
• Contacting you about your orders or resolving issues
• Handling payment and invoicing
• Responding to your enquiries and customer service requests
• Improving our products and services
• Sending information about similar products and special offers, only when permitted under GDPR
• Complying with applicable law and legal obligations

Data Processors and Sharing Your Data

We rely on selected third-party processors to assist in providing our services. These include:

• Payment processors for secure transaction handling
• IT service providers for website hosting, email, and order management
• Delivery partners for fulfilling orders in Highgate and nearby areas

Processors act under our instructions and are required to adhere to strict data protection standards. Data will not be sold to third parties, and sharing is limited to what is necessary for order fulfillment and service improvement.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law:

• Order records and related correspondence: retained for up to six years for accounting and legal purposes
• Marketing consent records: retained until consent is withdrawn
• Technical data (such as log files): kept for up to one year

At the end of the applicable retention period, data is securely deleted or anonymised.

Data Security

We use industry-standard security measures to protect your data, including encryption, secure servers, and access controls. Our employees and processors are trained to handle personal data safely, and regular audits are conducted to maintain security.

User Rights Under GDPR

Under the GDPR, you have several rights regarding your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You are entitled to request corrections of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data when there is no legal requirement for retention.
• Right to Restriction: You have the right to request that we limit our processing of your data in certain circumstances.
• Right to Data Portability: You may request delivery of your data in a commonly used format for your own use or to transfer to another service provider.
• Right to Object: You can object to processing of your data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: You may withdraw your consent to processing for marketing or other non-essential purposes at any time.

Children’s Privacy

We do not knowingly collect or process information from anyone under the age of 16. If we become aware that data has been collected from a minor without parental consent, we will take steps to remove such information promptly.

Changes to this Privacy Policy

This policy may be updated to reflect changes in legislation or our business operations. Material changes will be communicated to customers when required, and the most current version will always be available on our website or on request.

Contact and Complaints

If you have questions about this Privacy Policy or wish to exercise your GDPR rights, you may contact us by the methods indicated on our website or at our business premises. You also have the right to lodge a complaint with the Information Commissioner’s Office or your local supervisory authority if you believe your rights have been infringed.

By placing an order with Flower Delivery Highgate, you acknowledge that you have read and understood this policy and consent to your data being processed as described herein.