Wood Green Florist Customer Privacy Policy

Privacy Policy for Wood Green Florist Customers

At Wood Green Florist, we are committed to protecting the privacy and security of all personal data handled as we serve our valued customers located in Wood Green and the surrounding districts. This privacy policy provides an overview of what personal information we collect, our legal basis for processing it, the retention periods we observe, who processes your data, and your rights as a customer under the General Data Protection Regulation (GDPR). This applies to everyone who places an order with Wood Green Florist from Wood Green or the surrounding areas.

1. What Data We Collect

We collect only the information necessary to fulfill your orders, provide customer service, and improve our floral services. The types of personal data we may collect include:

  • Identity Data: Your full name.
  • Contact Data: Delivery address, recipient's name and address, and any provided phone number (for delivery purposes).
  • Order Data: Details about the products ordered, delivery instructions, and any message attached to your order.
  • Payment Data: Transaction details (we do not store card numbers; payments are processed via secure third-party payment providers).
  • Communication Data: Any correspondence or feedback you send us relating to your order.
  • Technical Data: Device and usage information (if you order online), such as IP address and browser type, to ensure the website works as intended and prevent fraud.

We do not intentionally collect special categories of personal data (such as health information) or data relating to children under the age of 16.

2. Our Lawful Basis for Data Processing

Under the GDPR, we must have a legitimate reason to process your personal data. Our legal bases include:

  • Performance of a contract: To process and deliver your floral order and fulfil contractual obligations.
  • Consent: When you opt in to receive updates, marketing communications, or promotional offers. You can withdraw your consent at any time.
  • Legal obligation: For compliance with laws, such as tax or accounting requirements.
  • Legitimate interests: To improve our services, ensure network security, or prevent fraud, provided these interests do not override your rights and freedoms.

3. Data Retention

Your personal data will be kept only for as long as necessary to fulfill the purposes we collected it for, including legal, regulatory, or reporting requirements. The retention periods may differ depending on the nature of the data and our obligations:

  • Order and transaction records: retained up to 7 years, for accounting and lawful business purposes.
  • Contact details (for marketing): retained only until you withdraw your consent or unsubscribe from communications.
  • Correspondence and complaint records: retained for as long as necessary to resolve the issue and maintain customer service standards.

Data that is no longer required will be securely deleted or anonymised so it can no longer be associated with you.

4. Data Processors and Third Parties

We may share your personal data with third parties only where necessary and in accordance with GDPR. Categories of recipients may include:

  • Payment processors: Secure third-party services that process your payment details on our behalf. We do not store card details.
  • Delivery partners: Couriers or delivery drivers who require your address to deliver your order.
  • IT service providers: Companies that support our website and data storage systems. They may have access to your information solely for system support and maintenance.
  • Regulatory authorities: If legally required, your data may be shared for compliance with tax or law enforcement requests.

Whenever we use service providers who process data outside the UK or European Economic Area (EEA), we ensure adequate safeguards are in place to ensure your data is protected to GDPR standards.

5. Your Rights Under the GDPR

As a customer, you have a number of rights concerning your personal data held by Wood Green Florist:

  • Right of access: You may request a copy of personal data we hold about you.
  • Right to rectification: You can ask us to correct or update inaccurate or incomplete data.
  • Right to erasure: Also known as 'the right to be forgotten', you may request deletion of your data under certain circumstances.
  • Right to restrict processing: You can ask us to limit the way we use your data if you are concerned about its accuracy or our use of it.
  • Right to object: You can object to our processing if we rely on legitimate interests as the legal ground.
  • Right to data portability: Where we process your data by automated means on the basis of consent or contract, you may request a copy in a commonly used format.
  • Right to withdraw consent: If you have provided consent for marketing or other purposes, you may withdraw it at any time.

If you wish to exercise these rights, please contact us using the details provided when you placed your order or on our website. We may require you to verify your identity before fulfilling your request. Normally, you will not have to pay a fee, but substantial or excessive requests may incur a reasonable charge.

6. How We Protect Your Data

Your security is extremely important to us. We employ appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. This includes the use of secure servers, access controls, staff training, and regular procedure reviews. Access to your data is limited to those employees, agents, and contractors who have a business need to know.

7. Changes to This Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make updates, we will indicate this with a revised policy date. Your continued use of our services following changes indicates your acceptance of the revised terms.

8. Who This Policy Applies To

This Privacy Policy applies to all customers placing orders with Wood Green Florist, including recipients and senders, covering those located in Wood Green and the surrounding districts. It does not cover third-party florists, unaffiliated websites, or services operated by other companies.

9. Contact and Complaints

If you have questions about this policy or how we handle your personal data, you can reach out to us using the details provided on our website or through your order records. Additionally, you have the right to lodge a complaint with your local supervisory authority if you believe that your data protection rights have been breached.

Thank you for trusting Wood Green Florist. We are dedicated to respecting your privacy and delivering the best service to all our customers.