Privacy Policy for Harrow Weald Florist Orders

Introduction

This Privacy Policy describes how Harrow Weald Florist collects, uses, stores, and protects the personal information of customers who place orders with us from Harrow Weald and the surrounding districts. We are committed to maintaining the privacy and security of your personal data, and handle all information in accordance with the General Data Protection Regulation (GDPR). By placing an order with us, you agree to the terms set out in this Privacy Policy.

What Personal Data We Collect

When you place an order or interact with Harrow Weald Florist, we may collect the following categories of personal data:

• Identity Information: such as your full name and, if applicable, the name of the recipient.
• Contact Details: including your address, email address, and telephone number, as well as contact information for the recipient if relevant.
• Order Information: details regarding your bouquet or floral request, delivery instructions, order history, and payment method details (though we do not store full card details, only necessary transactional records required for processing).
• Correspondence: any communication you send to us by post, by email, or via any other means.
• Technical Data: information such as IP addresses, browser type, and device identifiers, collected through our website for security and analytics purposes.

Lawful Basis for Processing Your Personal Data

Under GDPR, we are required to identify a lawful basis for each type of personal data processing. Our lawful bases include:

• Contractual Necessity: Much of the data we process is necessary for us to fulfil the contract with you, such as processing your order, delivering flowers, and managing payment.
• Legal Obligation: We may process your data to comply with applicable legal requirements, such as record-keeping and financial reporting.
• Legitimate Interests: We may use your contact details for customer support, feedback requests, or to inform you about changes to our services, provided that these uses do not override your rights and freedoms.
• Consent: For optional communications, such as promotional offers, we will always seek your explicit consent. You can withdraw your consent at any time.

How We Use and Share Your Data

Your information is used for purposes related to providing and improving our services, including:

• Processing and fulfilling orders
• Handling payments and refunds
• Delivering flowers to the correct recipient and location
• Customer service and support
• Improving our products and website
• Meeting legal and regulatory obligations

We do not sell or rent your personal data to third parties. We may share your data with trusted third parties who act as data processors on our behalf, strictly for order processing, delivery, payment, website services, or IT support. Every processor is bound by contractual obligations to ensure your information is protected and processed in accordance with GDPR.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including the fulfilment of orders, compliance with legal obligations, resolving disputes, or enforcing our agreements. Typically, customer information relating to orders is retained for a minimum of six years in line with accounting and tax regulations. After this period, your personal data is securely deleted or anonymised so that you can no longer be identified.

Third-Party Data Processors

To enable our services, we may use third-party data processors for the following functions:

• Order and Delivery Management: Delivery services may be provided by trusted local couriers, who receive only the minimum personal information required to complete your order.
• Payment Processing: Payments are managed through secure, PCI-DSS-compliant payment providers, which may temporarily process your payment data but do not retain card information after processing.
• Website Services: Technical and analytics service providers may access anonymised usage data solely to support website functionality and security.

All third-party processors are carefully vetted and are required to adhere to GDPR standards. They are authorised to use your data only for the specified purposes and are prohibited from using it for their own benefit.

Your Rights Under GDPR

As a customer of Harrow Weald Florist, you have several rights regarding your personal data under GDPR:

• Right of Access: You can request confirmation of what personal data we hold about you and receive a copy of that data.
• Right to Rectification: You may request correction of any inaccurate or incomplete information.
• Right to Erasure: Under certain circumstances, you can request the deletion of your personal data.
• Right to Restrict Processing: You may ask us to suspend processing of your data under specific conditions.
• Right to Data Portability: You can request that we provide your data in a structured, commonly used format and have it transferred to another data controller.
• Right to Object: You may object to certain types of processing, such as direct marketing.
• Withdraw Consent: Where our processing is based on consent, you may withdraw this at any time without affecting the lawfulness of processing conducted before withdrawal.

To exercise your rights, please contact us using our website’s contact form or written address. We will respond as required by data protection laws and aim to resolve all queries and requests promptly.

Security of Your Data

We are committed to ensuring your personal data is protected. We use a range of technical and organisational measures to maintain the security of your information, including secure servers, encrypted transactions, and regular staff training. Nevertheless, please note that no method of electronic transmission or storage is completely secure.

Policy Scope and Updates

This Privacy Policy applies to all customers who place orders with Harrow Weald Florist from Harrow Weald and its surrounding districts. We may update this policy from time to time to reflect changes in legal requirements or our business practices. We encourage you to read this policy regularly to stay informed about how we protect your information.

Contact and Complaints

If you have any questions about this policy, our data practices, or your rights as a data subject, please contact us in writing via the details provided on our website. If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office or your local supervisory authority.