Florist Harmondsworth Privacy Notice

Our Commitment to Your Privacy

Florist Harmondsworth respects your right to privacy and is committed to protecting your personal data. This Privacy Notice explains what personal data we collect from customers placing orders with Florist Harmondsworth in Harmondsworth and surrounding districts, our reasons for processing that data, how long we keep it, who may process it on our behalf, and the rights you have under the General Data Protection Regulation (GDPR).

Scope of This Privacy Policy

This Privacy Policy applies to all customers who place orders with Florist Harmondsworth, whether through our website, by telephone, or in-person, from Harmondsworth and surrounding districts. It is also relevant to individuals whose data may be provided by customers, such as recipients of flower deliveries.

What Personal Data We Collect

When you interact with Florist Harmondsworth, we may collect the following types of personal data as needed to complete and deliver your order:

  • Contact Information: Name, delivery address, billing address, telephone number.
  • Order Details: Products ordered, delivery preferences, card messages.
  • Payment Information: Payment method details (handled securely by third-party payment processors; we do not store full card or account details).
  • Recipient Information: Name, delivery address, and phone number of the recipient if not the same as the customer.
  • Communications: Details you provide during correspondence, such as inquiries or complaints.
  • Technical Data: IP address and browser information, collected automatically when you use our website to help us improve our service and security.

Lawful Basis for Processing Your Data

Under the GDPR, we are required to have a valid lawful basis to process your personal data. We rely on the following grounds:

  • Contractual Necessity: Processing your data is necessary to fulfill your order, including communicating with you and delivering flowers to the correct address.
  • Legitimate Interests: We process data to improve our services, prevent fraud, handle complaints, and ensure business operations run smoothly, provided these interests do not override your fundamental rights.
  • Legal Obligations: We may retain data as required to comply with applicable laws, such as those relating to accounting and tax.
  • Consent: When you voluntarily provide information, such as subscribing to a mailing list (if offered), we ask for and rely on your explicit consent. Where we rely on consent, you can withdraw it at any time.

How We Use Your Data

Your personal data is processed only for the purposes for which it was collected. These include:

  • Processing and delivering your flower order.
  • Communicating with you regarding your order status or to address your inquiries.
  • Managing payments and preventing fraudulent transactions.
  • Fulfilling our legal and accounting obligations.
  • Improving our products and services by understanding customer needs and preferences.

How Long We Keep Your Information

We retain your personal data only as long as is necessary for the purposes described in this notice or as required by law. Typically:

  • Order-related information is kept for a period necessary for fulfilling your order and to comply with legal obligations, such as tax and accounting regulations (generally up to 6 years).
  • Enquiry and complaint correspondence are retained only as long as needed to resolve your issue or as required for business or legal reasons.
  • Information for marketing purposes (if applicable and based on your consent) is kept until you unsubscribe or withdraw consent.

Who Processes Your Data (Data Processors)

To fulfill orders and run our business efficiently, we work with trusted third-party service providers (data processors) who may process your data on our behalf. These may include:

  • Payment processing companies (to securely handle transactions).
  • Delivery and courier partners (to deliver your order to the correct address).
  • IT and web service providers (to host our website and store digital data securely).
  • Accountancy and compliance service providers, where legally required.

All such third parties are required to process your data in line with our instructions, keep it secure, and comply with data protection regulations. We do not allow our processors to use your personal data for their own purposes.

Your GDPR Rights

Under GDPR, you have the following rights over your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request correction of any information you believe is inaccurate or incomplete.
  • Right to Erasure: Also known as the 'right to be forgotten,' you may ask us to delete your personal data where it is no longer necessary for the purpose for which it was collected, you withdraw consent, or you object to processing and there are no overriding legitimate grounds.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your data in certain circumstances.
  • Right to Data Portability: You can ask us to transfer data you have provided to us to another organisation, or to you, where technically feasible.
  • Right to Object: You can object to our processing of your data for direct marketing at any time. You may also object in other circumstances, depending on our lawful basis for processing.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before its withdrawal.

How We Keep Your Data Secure

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. All staff are trained in data privacy and processors are contractually required to maintain the confidentiality and security of your information.

Policy Changes and Updates

We may update this Privacy Policy from time to time to reflect changes in our law, our data processing activities, or industry best practices. The latest version will always be available alongside our ordering channels or at your request.

Contact and Complaints

If you have any questions or concerns about this Privacy Policy or your personal data at Florist Harmondsworth, you may get in touch with us by your usual order method or by written request. You also have the right to lodge a complaint with the supervisory authority if you believe your data protection rights have been infringed.

Conclusion

Your privacy and trust are important to Florist Harmondsworth. We are committed to handling your data with care, transparency, and respect at all times. If you have any questions about how your personal data is processed, please contact us using your preferred method.