Privacy Policy for Florist Nunhead Customers
Introduction
Your privacy is of the utmost importance to Florist Nunhead. This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers who place orders with Florist Nunhead from Nunhead and the surrounding districts. Please read this policy carefully to understand how your information is handled.
What Data We Collect
When you place an order or engage with our services, Florist Nunhead may collect the following categories of personal data:
- Identity Data: Name, surname, and where relevant, title or preferred form of address.
- Contact Data: Delivery address, billing address, phone number, and/or other contact details as required to fulfill your order.
- Order Data: Details about your order, such as product selections, delivery instructions, and special requests.
- Payment Data: Payment method type, transaction details (note: we do not store full card details; payment processing is conducted securely via a third-party provider).
- Correspondence: Records of your communications with us, including queries, feedback, and complaints.
- Technical Data: Device type, IP address, browser type, and website usage details collected through cookies or similar technologies (where applicable and in compliance with legal requirements).
Lawful Basis for Processing Your Personal Data
Florist Nunhead only processes your personal data where permitted by law and for legitimate purposes:
- Contractual Necessity: Most personal data is processed to fulfill our contract with you — for example, to take, fulfill, and deliver your flower orders.
- Legal Obligation: We may need to process your data to comply with laws or regulations, such as retaining transaction records for tax purposes.
- Legitimate Interests: We may process data for our legitimate business interests, such as improving services or preventing fraud, provided your rights and freedoms do not override these interests.
- Consent: Where required, we will ask for your explicit consent before processing certain types of data (e.g., for marketing communications). You can withdraw your consent at any time.
How We Use Your Personal Data
Your personal data is used for the following purposes:
- To process and deliver your flower orders, including confirming purchases and communicating with you about your order status.
- To manage payments, fees, and charges.
- To contact you about your account, service updates, or issues with your order.
- To improve our website, products, and customer service based on feedback and usage analytics.
- To comply with legal obligations, such as accounting and record-keeping.
How Long We Retain Your Data
Personal data collected by Florist Nunhead is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Order and transaction data is retained for up to seven years to meet legal and accounting obligations.
- Contact or customer service queries are typically retained for up to two years for quality, training, or resolving potential disputes.
- Any data collected with your consent for marketing purposes is retained until you withdraw your consent or opt-out.
After the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.
Data Processors and Third Parties
We may share your personal data with trusted third-party data processors who help us operate our business and provide services to you. These may include:
- Payment service providers (for payment processing and refunds).
- IT service providers (to host and maintain our website or customer database).
- Delivery or courier partners to ensure the successful delivery of your flower order.
Florist Nunhead requires all third-party processors to respect the security of your personal data and to process it only according to our instructions, always in compliance with GDPR.
International Transfers
Florist Nunhead does not routinely transfer your personal data outside the United Kingdom or European Economic Area. If such transfers become necessary, we will ensure appropriate safeguards are in place, as required by GDPR, to maintain the security and privacy of your information.
Protecting Your Personal Data
We employ a range of technical and organisational measures to ensure the confidentiality, integrity, and availability of your personal information. These include:
- Data encryption for electronic communications and storage where applicable.
- Restricted access controls to prevent unauthorised access to customer data.
- Regular review and updating of our security policies and protocols.
Your Data Protection Rights
You have the following rights regarding your personal data held by Florist Nunhead:
- Right to Access: You can request a copy of your personal data and information about how it is processed.
- Right to Rectification: You can request that inaccurate or incomplete data be corrected or updated.
- Right to Erasure: In certain circumstances, you may request that your personal data be deleted.
- Right to Restrict Processing: You can ask us to limit the way we use your data where applicable.
- Right to Data Portability: You can request that your data be transferred to you or another service provider in a structured, machine-readable format.
- Right to Object: You can object to processing of your data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the contact methods described on our website. Identification may be required to process your request.
Updates to This Privacy Policy
We may revise this Privacy Policy from time to time in response to changes in legislation, our data practices, or customer feedback. We encourage you to review this page periodically to stay informed about how we handle your data. The effective date will always be displayed at the start of the policy.
Contact and Complaints
If you have questions about this Privacy Policy or believe your data has not been handled in accordance with GDPR, please contact Florist Nunhead through the details provided on our website. If you remain dissatisfied, you have the right to lodge a complaint with your local data protection authority.