Florist Seven Sisters Privacy Policy

Introduction

This Privacy Policy explains how Florist Seven Sisters (“we”, “us”, “our”) collects, uses, stores, and protects your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws. This policy applies to all customers and users who order from Florist Seven Sisters while located in Seven Sisters and the surrounding districts.

What Data We Collect

When you place an order or interact with our services, we may collect and process the following personal data:

• Identity Data: Your full name.
• Contact Data: Billing and delivery address, phone number, and, where provided, email address.
• Order Data: Details related to the flowers and products ordered, delivery instructions, and any message to accompany your order.
• Payment Data: Payment transaction details (note: payment information such as card numbers are processed securely through our payment processor and are not stored by us).
• Usage Data: Information about how you navigate and use our website, including technical data such as IP addresses, browser type, device identifiers, time zone settings, and cookies (see relevant section below).

The Lawful Basis for Processing Your Data

Under the UK GDPR, we process your personal data only where we have a lawful basis:

• Contractual Necessity: We process your personal data to fulfil your order, manage payment, and handle delivery or customer service queries. Without this data, we could not provide you with our services.
• Legal Obligations: Your data may be processed as required by applicable law (for example, for accounting, anti-fraud, or tax purposes).
• Legitimate Interests: We may process your data for legitimate business interests, such as improving our services, detecting fraud, or managing our relationship with you, provided these do not override your fundamental rights and freedoms.
• Consent: Where required, for instance for certain types of marketing communications, we will process your data only if you have given your explicit consent. You may withdraw your consent at any time.

How We Use Your Information

Your personal information is used for the following purposes:

• To process and deliver your flower orders and gifts.
• To communicate with you about your order status or respond to your inquiries.
• To improve our website and customer service experience.
• To comply with our legal and regulatory responsibilities.
• With your consent, to send you marketing communications (you may opt out at any time).

Information Sharing and Processors

We do not sell or rent your personal data. We only share your data with trusted third parties (processors) where necessary to provide our services or comply with the law. Such entities may process data on our behalf and under our instructions. These include:

• Payment Service Providers: To handle card or electronic payments securely.
• Delivery Partners: For the fulfilment and tracking of your orders.
• IT and Hosting Providers: For secure website hosting, data storage, and backup services.
• Professional Advisors: Such as accountants or legal consultants, where necessary for our business operations and compliance.

All third-party service providers are required to respect the confidentiality and security of your data and are not permitted to use it for their own purposes.

International Data Transfers

We generally process your personal data within the UK. If we do transfer data outside the UK or the European Economic Area, we ensure appropriate safeguards are in place to protect your privacy, as required by law.

Data Security

We have in place robust technical and organisational measures to safeguard your personal information from accidental loss, unauthorised access, misuse, alteration, or disclosure. These security measures include encrypted connections, access controls, and staff training. However, while we strive to protect your data, no transmission over the internet can be guaranteed to be completely secure.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal obligations, including for accounting, tax, or dispute resolution. The retention period may vary depending on the type of data and legal requirements:

• Order and Transaction Data: Kept for up to six years after your last transaction to comply with record-keeping obligations.
• Marketing Data: Retained until you opt out or withdraw consent for marketing communications.
• Website Usage Data: Retained for up to two years for analytics and security purposes.

Your Rights

Under the UK GDPR, you have several rights concerning your personal data:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure (‘right to be forgotten’): Request deletion of your personal data, subject to certain legal exceptions.
• Restriction: Request restriction of processing in certain circumstances.
• Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another provider.
• Objection: Object to our processing of your personal data where we are relying on legitimate interests or for direct marketing.
• Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.

To exercise any of these rights, please contact us using the details in the contact section of our website. We may need to verify your identity before responding to your request. There is generally no fee for exercising your rights; however, we may charge a reasonable fee if your request is unfounded or excessive.

Cookies and Analytics

Our website uses essential cookies to enable core functionality. Where used, analytical and functionality cookies gather statistical information about how visitors interact with our website, helping us improve the user experience. Where required by law, we seek your consent for the use of non-essential cookies. You can adjust your browser settings to block cookies, but this may affect website performance.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page. Please review this policy periodically to ensure you remain informed about how we protect your information.

Contact and Complaints

If you have any questions, concerns, or wish to exercise your rights regarding your personal data or this Privacy Policy, please contact us using the information on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe we have not complied with data protection laws.