Florist St John's Wood Privacy and Data Policy

Introduction

This Privacy Policy outlines how Florist St John’s Wood collects, uses, stores, and protects the personal data of all customers placing orders from St John’s Wood and surrounding districts. We are committed to maintaining the privacy and security of your information and complying fully with the General Data Protection Regulation (GDPR).

Who This Policy Applies To

This policy applies to all customers and website visitors who place Florist St John’s Wood orders for delivery in St John’s Wood and neighbouring areas. By placing an order or interacting with our website, you acknowledge and consent to the practices described in this policy.

What Personal Data We Collect

We collect the following categories of personal data to fulfil your order and maintain our business processes:

• Contact Information: Name, address, email address, and phone number (if provided) of the order recipient and the sender.
• Order Information: Details of purchases, delivery addresses, and any messages provided with the order.
• Payment Information: Partial payment details (we do not store full card details; payments are processed securely by third-party providers).
• Correspondence: Any communications or enquiries you send to us.
• Website Usage Data: IP addresses, device information, browser type, and usage statistics collected via cookies for analytics and service improvement (see our cookie notice for more information).

Lawful Basis for Data Processing

Florist St John’s Wood processes personal data under the following lawful bases defined by the GDPR:

• Contractual Necessity: Personal data is required to process, confirm, and deliver your order.
• Legal Obligation: We may retain certain data for tax, accounting, and regulatory requirements.
• Legitimate Interests: For improving services, responding to your enquiries, and ensuring the security of our website and operations.
• Consent: Where required for marketing communications or non-essential cookies, we will seek your explicit consent.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing your order and communicating order status.
• Arranging delivery of goods to the specified address.
• Handling queries, customer service requests, and complaints.
• Improving the quality, functionality, and security of our website.
• Complying with legal, tax, or regulatory obligations.
• Sending marketing communications if you have opted in (you may opt out at any time).

Data Retention

We retain your personal data only as long as necessary for the purposes set out in this Privacy Policy, including the fulfillment of your order, legal, accounting, or reporting requirements. Typically, personal order details are retained for no more than 6 years to satisfy legal obligations. Non-essential data, such as correspondence or marketing consents, is retained for as long as you are an active customer or until you withdraw consent.

Data Processors and Third Parties

To deliver our services, we work with trusted third-party service providers (data processors) who may process personal data on our behalf. These include:

• Payment processing services handling financial transactions securely.
• Delivery and courier services responsible for fulfilling orders.
• Marketing and communication platforms, where you have opted in for updates.
• IT and website support services managing website analytics, hosting, and security.

All processors are contractually bound to treat your data confidentially, securely, and in compliance with GDPR, and may not use it for other purposes.

Your Rights as a Data Subject

As a customer of Florist St John’s Wood, you have the following rights concerning your personal data under GDPR:

• Right of Access: Request a copy of your personal data held by us.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal information where we have no legal basis to continue processing it.
• Right to Restrict Processing: Ask us to pause data processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured format for transfer to another provider.
• Right to Object: Object to processing where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: Raise concerns with your local data protection authority if you believe your rights have been violated.

We will respond to your requests in accordance with GDPR timelines and requirements. Please provide sufficient identification information to help us respond securely to your request.

Data Security

We employ technical and organisational measures to safeguard your personal data from accidental loss, unauthorised access, or misuse. This includes secure servers, encrypted payment processing, and regular staff training. Access to your information is restricted to personnel and processors who require it for legitimate business functions.

International Transfers

Florist St John’s Wood stores and processes your data within the United Kingdom and the European Economic Area (EEA). If data is transferred outside these regions by a processor, we ensure that adequate safeguards, in accordance with GDPR, are in place to protect your data.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our data practices, or the features of our service. We encourage you to review this policy periodically for any changes.

Contacting Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us in writing. We are committed to responding promptly to your enquiries regarding your personal data at Florist St John’s Wood.