Florist Harlington Privacy Policy

Introduction

This Privacy Policy explains how Florist Harlington collects, uses, stores, and protects the personal data of all customers placing flower orders from Harlington and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and to safeguarding your personal information throughout your experience with us. This policy details what data we collect, how and why we use it, how long we keep it, our relationships with data processors, and your rights under GDPR.

What Data We Collect

In order to provide our flower delivery and related services, we collect and process the following types of personal data:

• Contact Information: This includes your name, delivery address, billing address, and phone number (if provided).
• Order Details: Information regarding the products you purchase and preferences you indicate.
• Payment Information: Details required to process your payment, such as payment card type and basic transaction identification details. Please note that while payment is processed, full card numbers or CVV numbers are never stored by Florist Harlington.
• Correspondence: Any communication you send to us, such as order instructions, queries, or feedback.
• Technical Data: When you visit our site, we may collect limited technical information such as IP address, browser type, and access times to help maintain site security and functionality.

We do not intentionally collect sensitive personal data (such as health, ethnicity, or biometric information).

Lawful Basis for Processing Your Data

Florist Harlington only collects and processes your personal data when there is a lawful basis to do so, as set out by the GDPR. The primary grounds on which we process your data are:

• Contractual Necessity: Most of the information we request is essential to fulfill your flower order, process payment, and deliver products or services as requested by you.
• Legal Compliance: We may process certain data where we are legally obliged to do so, for example, to comply with accounting or taxation requirements.
• Legitimate Interests: We may use your data to enhance our services, improve user experience, or prevent fraud, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where applicable, such as for marketing communications not directly related to your order, we will seek your explicit consent, which you may withdraw at any time.

How We Use Your Personal Data

The data we collect is used for the following purposes:

• Processing, fulfilling, and managing your florist order.
• Communicating with you regarding your order or responding to your inquiries.
• Processing payments and issuing refunds when necessary.
• Improving our products, website, and customer service offerings.
• Meeting our legal and regulatory obligations.
• Preventing fraud and ensuring the security of our systems.

Data Retention Periods

We retain your personal data only for as long as necessary for the purposes outlined above, or as required to comply with legal, regulatory, or contractual obligations. Typically:

• Order and transaction records are retained for up to 7 years to comply with accounting and tax regulations.
• Contact and delivery details are generally kept for up to 2 years from your last order, unless a longer period is necessary for business or legal reasons.
• After these periods, your data is securely erased or anonymised.

Third-Party Data Processors

To provide our services effectively, we may share your data with trusted third-party processors. These processors include:

• Payment service providers for processing transactions
• IT service providers who assist in website hosting, email communication, or infrastructure support
• Delivery partners or local couriers to facilitate order fulfillment
• Accounting firms for regulatory compliance purposes

All third-party processors are carefully selected, subject to contractual obligations to safeguard your data, and may only process your personal data on our instructions. We do not sell your personal data to any third parties.

Your Rights Under GDPR

Under GDPR, you have a number of rights in relation to your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of any inaccuracies in your data.
• Right to Erasure: You may request deletion of your data where it is no longer required, subject to exemptions (such as for compliance with legal obligations).
• Right to Restrict Processing: You can ask us to limit the way we use your data.
• Right to Data Portability: You may receive your data in a structured, commonly used format, or ask us to transmit it to another provider where feasible.
• Right to Object: You may object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we process your data on the basis of consent, you can withdraw this consent at any time.
• Right to Lodge a Complaint: You also have the right to lodge a complaint with the appropriate supervisory authority if you believe your rights have been infringed.

Security Measures

We have implemented technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or destruction. These safeguards are regularly reviewed and updated in line with industry standards.

Changes to This Privacy Policy

This policy may be updated from time to time to reflect changes in our data practices or statutory obligations. The updated policy will apply to all current and new customers placing orders with Florist Harlington from Harlington and the surrounding districts. We encourage you to review the policy periodically.

Contact and Further Information

Should you have any concerns or wish to exercise your rights under this policy, please get in touch with us using the contact details provided on our website or at our Harlington store location. We are committed to addressing your queries promptly and respectfully.