Edgware Florist Privacy Policy

Introduction

At Edgware Florist, your privacy is of utmost importance. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information under the General Data Protection Regulation (GDPR). It applies to all customers placing Edgware Florist orders from Edgware and the surrounding districts. We are committed to ensuring transparency, fairness, and security as we process your data.

What Data We Collect

When you interact with Edgware Florist—whether by visiting our premises, making an order by phone, or requesting delivery via our website—we may collect the following information:

• Contact Information: Name, delivery address, billing address, and telephone number.
• Order Details: Information on the products you order, recipient names and addresses (for deliveries), special instructions, and chosen delivery dates.
• Payment Information: Transaction details excluding full card numbers, as payment processing is handled securely by third-party providers.
• Communications: Records of your correspondence with us (for example, when making enquiries, complaints, or providing feedback).
• Technical Data: IP address and device identifiers, only if you interact with us online, for security and website analytics purposes.

Lawful Basis for Processing

Edgware Florist will only process personal data when we have a valid legal reason to do so. Our main lawful bases under the GDPR include:

• Performance of a Contract: Most of the data we collect is necessary to fulfill your order and provide you with our products and services.
• Legal Obligations: We may retain certain transactional information for tax and accounting compliance.
• Legitimate Interests: We may process your data for service improvement, fraud prevention, and marketing of similar products, provided these interests are not outweighed by your rights and interests.
• Consent: If you sign up to receive marketing communications that are not related to your orders, we will only do so with your explicit consent. You can withdraw consent at any time.

How We Use Your Data

Your information is processed for the following purposes:

• Fulfilling, delivering, and confirming your floral orders.
• Maintaining accurate business and financial records.
• Responding to enquiries, requests, and complaints.
• Improving our products and customer experience through service analysis and feedback.
• Complying with applicable legal and regulatory obligations.
• Sending service-related emails or notifications about your order.
• With your explicit consent, providing updates on new products, promotions, or events.

Who Accesses or Processes Your Data

Your personal data is primarily accessed and processed by Edgware Florist staff responsible for order preparation, delivery, and customer service. In certain circumstances, we securely share your information with trusted third parties, known as data processors, who assist in delivering our services. These include:

• Payment Service Providers: To process your payments safely and securely.
• IT and Cloud Service Providers: For secure data storage and management, website hosting, and analytics.
• Couriers and Delivery Partners: To fulfil the delivery of your floral arrangements to your nominated recipient.
• Professional Advisors: Such as accountants or legal counsel, where necessary for business compliance and legal advice.

All processors act under written contracts that require compliance with GDPR, confidentiality, and the security of your data. We do not sell or rent your personal information to third parties.

Data Retention

Edgware Florist will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory obligations. Generally, we keep order records and associated personal details for up to seven years to satisfy UK tax and accounting requirements. If you have provided consent for marketing, your contact details will be stored until you withdraw your consent, at which point we will promptly remove you from our marketing lists.

Data Security

We take reasonable steps to ensure your data is stored securely and protected against unauthorised access, loss, or misuse. Security measures include limiting access to personal information to staff and processors who require it, using secure IT systems, and regularly reviewing our procedures in line with data protection best practices.

Your Rights Under GDPR

As a customer, you are entitled to exercise specific rights under GDPR regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: If your information is incorrect or incomplete, you have the right to have it corrected.
• Right to Erasure: In certain circumstances, you can ask us to delete your personal data.
• Right to Restriction of Processing: You may request that we limit the processing of your information.
• Right to Data Portability: You can request the transfer of your data to another organisation.
• Right to Object: You may object to the processing of your data based on our legitimate interests or for marketing purposes.
• Right to Withdraw Consent: If we are processing your information based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the methods indicated on our website or in-store.

Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in legal requirements or our privacy practices. The amended policy will be published on our website and in-store, with the date of the most recent update clearly indicated.

Contact and Complaints

If you have any questions about our Privacy Policy, your data, or wish to exercise your rights under GDPR, please visit our website or speak to a member of staff in-store for information on how to proceed. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled in accordance with the law.