Finchley Florist Privacy Policy

Introduction

At Finchley Florist, we highly value your trust and are committed to respecting your privacy and protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard any information that you provide when placing an order with Finchley Florist, whether you do so online, by phone, or in person. It also sets out your rights as a data subject under the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Finchley Florist from Finchley and the surrounding districts.

What Personal Data We Collect

When you interact with Finchley Florist to make a purchase or inquiry, we may collect and process the following categories of personal data:

• Identity Data: Name, surname, and, if required, your title.
• Contact Data: Delivery address, billing address, email address, and phone number.
• Order Data: Order details, including card messages, delivery instructions, occasion type, date and time of order.
• Recipient Data: Name, delivery address, and contact details of the person receiving flowers.
• Payment Data: Payment card information (collected via secure third-party payment processors — Finchley Florist does not access or retain full payment card details).
• Technical Data: IP address, browser type and version, time zone setting, and cookies (when using our website).
• Communication Data: Records of correspondence and other communications when you contact us, whether by email, phone, or post.

Lawful Basis for Processing Your Data

Finchley Florist will only process your personal data when permitted by law. The main grounds for processing your data are:

• Contractual Necessity: Processing your data is necessary to fulfil our contract with you, including order processing, delivery, and responding to your queries.
• Legal Obligations: We may be required to process your data to comply with applicable laws, such as tax or accounting regulations.
• Legitimate Interests: We have a legitimate interest in processing your data to ensure effective business operations and customer service, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: In circumstances where required, such as sending marketing information, we will request your explicit consent. Consent can be withdrawn at any time.

How We Use Your Personal Data

Your personal data is used solely for the purposes for which it was collected, including:

• Processing, fulfilling, and delivering your orders for flowers or related products
• Communicating with you about your order or responding to inquiries
• Managing our relationship with you
• Internal record keeping and administration
• Complying with our legal and regulatory obligations
• Improving our products, services, and customer experience
• Notifying you of important changes to our policies or services
• With your permission, sending occasional direct marketing messages

Retention of Your Personal Data

Finchley Florist retains your personal data only as long as necessary to fulfil the purpose for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period may vary based on the type of data and the context of its collection. Generally, we retain customer and order information for a period of six years to comply with legal obligations and to assist with any potential disputes. After this period, your data will be securely deleted or anonymized.

Data Processors and Third Parties

Finchley Florist may share your data with trusted third-party service providers (data processors) who assist us in delivering our services, such as:

• Payment processing companies
• IT and website support providers
• Delivery and logistics partners
• Accountants and legal advisors

All data processors are required to comply with the GDPR and to treat your data with the same level of protection as Finchley Florist. Your personal data is never sold to any third parties. We do not transfer your data outside the UK or European Economic Area unless adequate safeguards are in place to ensure its protection.

Security of Your Personal Data

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to prevent unauthorized access, disclosure, alteration, or destruction of your personal information. These measures include restricted data access, encrypted storage, secure payment processing, and regular staff training on data protection.

Your Rights as a Data Subject

Under the GDPR, you have several legal rights in relation to your personal data, including:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of the data if it is inaccurate or incomplete.
• Right to Erasure: Request erasure of your data where there is no compelling reason for its continued processing.
• Right to Restriction: Ask us to suspend the processing of your personal data in certain circumstances.
• Right to Data Portability: Request your data be provided to you or to another controller in a structured, machine-readable format.
• Right to Object: Object to the processing of your data for direct marketing or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.
• Right to Lodge a Complaint: If you are concerned about how we handle your personal data, you can lodge a complaint with the UK data protection authority.

If you wish to exercise any of these rights, you can contact us using the methods described in our contact section on the website, or by other means usually available to you as our customer.

Policy Updates

Finchley Florist reserves the right to update or amend this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any such changes will be effective when posted on our website. We encourage you to periodically review this policy to stay informed about how we protect your data.

Applicability

This Privacy Policy applies to all personal data collected from customers placing orders with Finchley Florist that are delivered within Finchley and the surrounding districts. By placing an order or making an inquiry with us, you acknowledge that you have read and understood our Privacy Policy.