Privacy Policy for Flowers Tufnell Park Customers
Introduction
This Privacy Policy outlines how Flowers Tufnell Park collects, uses, stores, and protects personal data of our customers. It applies to all individuals placing orders for Flowers Tufnell Park’s products and services in Tufnell Park and the surrounding districts, including but not limited to Holloway, Kentish Town, Archway, and Gospel Oak. We are dedicated to handling your personal information respectfully and in full compliance with the General Data Protection Regulation (GDPR).
What Data We Collect
When you place an order with Flowers Tufnell Park, we may collect the following categories of personal data:
- Identity Data: Your name and, if different, the name of the recipient.
- Contact Data: Address (for delivery and billing), postcode, email address, and telephone number (if provided).
- Order Details: Items ordered, order dates, delivery instructions, personalised messages included with orders, and order history.
- Payment Data: Payment method, partial payment card information (last four digits), or transaction ID. Full payment card numbers or security codes are never stored by Flowers Tufnell Park but may be processed by our payment processors.
- Communications: Correspondence with our support team, feedback, or any queries you direct to us.
- Usage Data: Information about how you use our website or services, such as pages viewed and order preferences, collected via cookies or similar tracking technologies (where applicable).
Lawful Basis for Processing Data
We process your personal data only when permitted by law, primarily relying on the following lawful bases as set out in the GDPR:
- Contract: Processing is necessary for the performance of a contract with you (for example, to process your order, arrange delivery, or handle payment).
- Legal Obligation: As a business, we may be required to retain certain records for tax or regulatory purposes.
- Legitimate Interests: We may process your data to communicate with you about your order, improve our services, or for fraud prevention, provided such interests are not overridden by your rights and interests.
- Consent: If you have opted in for marketing communications, we rely on your consent, which you may withdraw at any time.
How We Use Your Information
Your data is used for the following purposes:
- To process and fulfil your flower orders accurately and efficiently
- To communicate order status, confirmations, or updates about delivery
- To provide customer service and handle any enquiries or complaints
- To comply with applicable legal, regulatory, and accounting requirements
- To improve our website, services, and customer experience
- To manage our relationship with you, including sending you service-related communications
- If you have consented, to send you marketing messages regarding new products or special offers
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected or to meet legal, accounting, or regulatory requirements. Typically, we will retain customer order information for up to six years, which allows us to resolve disputes, comply with tax obligations, and maintain accurate business records. Data used for marketing purposes will be held until you opt out or withdraw your consent.
Data Processors and Sharing Your Data
To provide our services, we may share your information with carefully selected third parties, known as data processors. These include:
- Payment Service Providers: To process transactions securely.
- Delivery Partners or Couriers: To ensure timely and accurate delivery of your order.
- IT and Website Hosting Providers: For secure data storage, website functionality, and technical support.
- Professional Advisors: Such as accountants or legal advisers, where required for business operations.
We require all processors to treat your data in accordance with this Privacy Policy, contractual obligations, and the requirements of the GDPR. We do not sell your personal information to third parties for any purpose.
Your Rights Under GDPR
If you are a customer placing an order with Flowers Tufnell Park in Tufnell Park or the surrounding area, your rights under the GDPR include:
- Right of Access: You may request a copy of the data we hold about you.
- Right to Rectification: You may ask us to correct inaccurate or incomplete information.
- Right to Erasure: You may request deletion of your personal data when it is no longer necessary for us to retain it.
- Right to Restrict Processing: You can request that we stop processing your data in certain circumstances.
- Right to Data Portability: You can ask to receive your data in a machine-readable format and to have it transferred to another provider where technically feasible.
- Right to Object: You may object to certain types of processing, such as direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
- Right to Lodge a Complaint: You have the right to complain to the relevant data protection authority if you feel your rights are not being respected.
Security and Data Protection
We take the security of your personal data seriously. Flowers Tufnell Park uses technical and organizational measures, such as encryption, access restriction, and secure payment processing, to ensure your information is protected against loss, misuse, or unauthorized access. Only staff and third parties with a legitimate business need to access your information will do so, and all are bound by confidentiality obligations.
Policy Updates
This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or services offered. Any changes will take effect once published on our website. We encourage you to review this policy whenever you use our services to remain informed about how we process and protect your personal data.
Contacting Flowers Tufnell Park
If you have any questions or concerns about how Flowers Tufnell Park protects your information, or if you wish to exercise any of your data rights, please use our website's contact form or write to us at our business address. We are committed to resolving any privacy-related issues promptly and respectfully.