Florist Muswell Hill Privacy Policy for Customers

Privacy Policy – Your Data and Florist Muswell Hill

This Privacy Policy describes how Florist Muswell Hill (“we”, “our”, “us”) collects, uses, processes, and protects personal data relating to individuals placing orders with us in Muswell Hill and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and local data protection laws. This policy applies to all customers, including those making inquiries or placing orders for delivery or collection.

1. What Data We Collect

We collect a range of personal data necessary for processing your order and providing our services. The categories of data we may process include:

  • Identity Data: e.g., your name and, if relevant, the recipient’s name.
  • Contact Data: delivery address, billing address, and where provided, telephone number.
  • Order Data: details of your order, including products chosen, card message, delivery instructions, and purchase history with us.
  • Payment Data: transaction information (please note payment card details are not stored by us, but processed securely via our chosen payment providers).
  • Communications Data: records of correspondence when you contact us, including feedback or complaints.
  • Technical Data: your IP address and browser details when you use our website; this may include usage statistics through cookies (please see our Cookie Policy for further information).

2. Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. Depending on the specific activity, we rely on the following legal grounds:

  • Performance of a contract: Processing is necessary to fulfil your order or handle pre-contract inquiries.
  • Legal obligation: We may process personal data to meet legal requirements (e.g., tax or accounting regulations).
  • Legitimate interests: We have a legitimate business interest in managing and developing our business (e.g., improving services, analysing sales, record-keeping), provided these do not override your rights.
  • Consent: In situations where we rely on your consent (e.g., for marketing communications), you have the right to withdraw consent at any time.

3. How We Use Your Personal Data

Florist Muswell Hill processes your data to:

  • Process and deliver your orders, including communicating updates and confirmations.
  • Respond to your inquiries, complaints, and customer service requests.
  • Maintain records for accounts, taxation, and auditing purposes.
  • Improve our products and services through feedback and analysis.
  • Comply with our legal obligations and protect our business.
  • Send you marketing communications where you have provided consent (which you may withdraw at any time).

4. Retention of Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. We will typically retain order records and related data for a period consistent with statutory requirements (usually 6 years for tax and contract records), after which data will be securely deleted or anonymised. If you have requested we do not contact you for marketing again, we will keep a record of your preference.

5. Data Sharing and Processors

We do not sell your personal data. We may share your information with selected third parties (data processors), strictly to the extent necessary for providing our services or fulfilling legal obligations. These may include:

  • Payment service providers: To securely process your purchase payments.
  • IT and website support providers: To help manage our website and IT infrastructure.
  • Delivery partners: For delivering your order (e.g., local delivery drivers).
  • Professional advisers: Such as accountants or legal counsel, when required.

We require any third-party with whom we share data to respect the security of your personal information and to treat it in accordance with the law. Where processors are located outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place as required by the GDPR.

6. Security of Your Information

Safeguarding your information is a priority for us. We implement a range of technical and organisational measures to protect your personal data against accidental loss, misuse, alteration, or unauthorised disclosure. Access to your data is limited to personnel and third parties who need it to process your order or support our business operations. All such individuals are bound by confidentiality obligations.

7. Your Data Protection Rights

Under data protection laws, you have a range of rights regarding your personal data, including:

  • Right to access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You may ask us to correct or update inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): You can request deletion of your personal data in certain circumstances.
  • Right to restrict processing: You can request that we suspend processing of your data in some situations.
  • Right to data portability: Where applicable, you can ask for a copy of your personal data in a structured, commonly used digital format.
  • Right to object: You have the right to object to processing of your data under certain grounds (for example, direct marketing).
  • Right to withdraw consent: Where we process data based on your consent, you can withdraw consent at any time.
  • Right to complain: You can lodge a complaint with the relevant data protection authority.

To exercise any of these rights, or if you have questions about how we handle your data, please contact us directly.

8. Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data about children without appropriate parental consent.

9. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices or relevant regulation. Updated versions will be made available in-store and on our website and will be effective from the date of publication.

10. Scope and Application

This Privacy Policy applies to all customers of Florist Muswell Hill and individuals placing orders in Muswell Hill and surrounding districts. By engaging with us and placing orders, you agree to this policy as it relates to the handling of your personal data.

We are committed to ensuring your privacy is protected and your data rights are upheld in all our interactions.