Florist Highgate Privacy Commitment

Introduction

At Florist Highgate, we respect your privacy and are dedicated to protecting your personal information in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your data whenever you place an order with Florist Highgate from Highgate and surrounding districts. Your trust is important to us, and we are committed to transparency and accountability in all aspects of our data processing.

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Florist Highgate, regardless of whether the order is made in-store, by telephone, or via our website. The policy covers data collected from customers located in Highgate and neighbouring areas. By placing an order, you agree to the terms outlined in this policy.

What Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and location data relevant for fulfilling your order.
• Order Details: Information about products ordered, delivery preferences, and messages attached to orders.
• Payment Details: Information necessary for payment processing, such as payment method, although full card details are processed by our payment service providers and not stored by us.
• Communication Records: Correspondence between you and Florist Highgate regarding your order or queries.
• Technical Data: Device information, IP address, and website usage data (if you use our site), collected via cookies or similar technologies to improve website performance and customer experience.

Lawful Basis for Processing Your Data

We process your personal data based on the following lawful bases as specified under GDPR:

• Contractual Necessity: Processing is necessary for us to fulfil your order and provide related services. Without this data, we would not be able to deliver our products to you.
• Legal Obligation: Some information may be retained or processed to comply with applicable legal or regulatory requirements, such as tax and accounting rules.
• Legitimate Interests: We may use your data to improve our products and services, communicate with you about your order, and ensure our services run securely and efficiently. We always balance these interests with your individual rights and interests.
• Consent: Where we seek your consent, for example for marketing communications, this will be made explicit and you have the right to withdraw consent at any time.

How We Use Your Personal Data

Florist Highgate only uses your data for purposes explained above, including:

• Processing and delivering your orders efficiently and accurately.
• Notifying you about the status of your order or changes to our services.
• Improving our website and services based on your feedback and usage patterns.
• Complying with applicable laws and regulations.

Data Sharing and Processors

We may share your data with service providers acting as data processors who help us deliver our services:

• Payment Processors: To securely process your payments.
• IT and Hosting Providers: To manage our website and store order information securely.
• Delivery Partners: To facilitate delivery of your floral arrangements.

All third-party processors act under our instructions, are bound by contractual obligations to safeguard your data, and are assessed to ensure GDPR compliance. Florist Highgate does not sell or rent your personal data to third parties.

Retention of Your Personal Data

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected and to comply with legal and regulatory requirements. Typically, order information is retained for up to seven years for accounting and tax purposes. Communication records may be retained for a shorter period unless required for ongoing customer service or legal obligation. Once no longer required, your data is securely deleted or anonymised.

How We Protect Your Data

We take the security of your data seriously. Florist Highgate uses a combination of technical and organizational measures to safeguard your personal information. These include:

• Encryption of sensitive data where appropriate.
• Secure payment gateways for financial transactions.
• Restricted access to customer information, limited to personnel who need it for processing your order.
• Regular review of our security practices and third-party service providers.

Your Rights Under GDPR

You have the following rights regarding your personal data held by Florist Highgate:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete information.
• Right to Erasure: You have the right to request deletion of your data where it is no longer necessary, where you withdraw consent, or where the processing is unlawful.
• Right to Restrict Processing: You can request restricted processing of your data in certain circumstances.
• Right to Object: You may object to certain types of processing, such as direct marketing, at any time.
• Right to Data Portability: You can request your data be provided to you or transferred to another provider in a commonly used format.
• Right to Withdraw Consent: If we process your data based on your consent, you can withdraw this at any time.
• Right to Lodge a Complaint: You can make a complaint to data protection authorities if you believe your rights have been infringed.

If you wish to exercise any of these rights, please contact us via the appropriate communication channels specified on our website or in store.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. Please review this policy periodically to stay informed about how we protect your data. Where changes are significant, we will notify you where appropriate.

Contact and Further Information

For more details about how Florist Highgate collects or uses your personal data, or if you have any questions about this Privacy Policy, you may contact us using the information provided on our website or in store. We are committed to resolving any concerns and respecting your privacy rights at all times.