Belsize Park Flowers Privacy Policy

Introduction

This Privacy Policy sets out how Belsize Park Flowers collects, uses, retains, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and related data protection laws. This policy applies to all customers placing flower orders with Belsize Park Flowers from Belsize Park and the surrounding districts. Your privacy is important to us, and we are committed to safeguarding your personal information.

What Personal Data We Collect

We limit our data collection to the information required to process your flower orders and provide excellent service. The types of data we may collect include:

• Full name: To identify you as our customer and verify orders.
• Contact details: Such as your address, delivery address, telephone number (if provided), and order recipient’s name and address if different.
• Order details: Information about the flowers, gifts, messages, and requested delivery dates/times.
• Payment information: Limited to transaction details provided through our chosen payment processor (we do not store full payment card details).
• Communication correspondence: Copies of emails, order queries, or special requests you send us.
• Technical data: Such as IP address, browser type, and device information collected when you use our website (for security, analytics, and performance purposes).

Lawful Basis for Processing Your Data

We only process your personal data as permitted under GDPR. Our lawful processing grounds are:

• Contractual necessity: Most personal data is processed to fulfill your flower order and deliver products or services you have requested.
• Legal obligations: In certain cases, we are required to retain data for accounting, tax, auditing, and regulatory compliance.
• Legitimate interests: We may use your data to improve our services, prevent fraud, respond to queries, or send essential order updates. Our legitimate interests are balanced against your privacy rights and freedoms.
• Consent: Where applicable, such as for optional marketing communications, we will seek your explicit consent and you may withdraw this at any time.

How We Use Your Information

Your data is used strictly for the purposes outlined below:

• To process orders and arrange delivery of flowers and related products.
• To communicate with you regarding your order status, delivery updates, or any issues requiring clarification.
• To comply with our financial and legal obligations.
• For internal record-keeping, analysis, and continued improvement of our customer service.
• If you provide consent, to send information about new services or special promotions relevant to Belsize Park Flowers.

Retention of Your Data

Your personal information is retained only for as long as necessary:

• Order and transaction records: Up to 7 years to fulfill accounting and auditing obligations.
• Customer correspondence: Up to 2 years to address any questions or complaints.
• Marketing data: Retained only while you have not withdrawn your consent. Data will be erased or anonymised when no longer required for the original purpose or if you exercise your data rights.

Processors and Data Sharing

We take your data privacy seriously. Personal data is not sold or provided to other businesses for commercial purposes. Access to personal information is strictly limited to employees and trusted third-party service providers required to deliver our services, including:

• Delivery partners: For arranging and fulfilling flower deliveries.
• Payment service providers: To process your payments securely. We do not store your full card details.
• Website and IT service providers: For secure data hosting, analytics, maintenance, and technical support.

All third-party processors are subject to strict confidentiality agreements and are required to comply with GDPR data protection standards. We do not transfer personal data outside the UK or EEA unless adequate protections are in place.

Your Data Protection Rights

Under GDPR, you have a range of rights regarding your personal data. You may have the right to:

• Access your personal data held by us and obtain a copy.
• Request correction of inaccurate or incomplete information.
• Ask for data to be erased ("right to be forgotten") unless we are required to retain it for legal obligations.
• Restrict or object to certain types of processing, especially processing based on legitimate interests or direct marketing.
• Request the transfer of your data to another service provider (data portability).
• Withdraw your consent at any time where consent is relied upon.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data rights have been infringed.

Security of Your Data

We have put in place appropriate technical and organisational measures to safeguard your personal information from accidental loss, unauthorized access, misuse, or disclosure. These include secure website encryption, up-to-date security protocols, and limiting access to only those staff who require it to carry out their duties.

Policy Updates

We may update this privacy policy from time to time to reflect changes in law or our data handling practices. Customers placing orders in Belsize Park and surrounding districts will be notified of significant updates through our website or during the order process. The latest version will always be available upon request.

Contact and Queries

If you have any questions about this Privacy Policy or how your personal information is handled by Belsize Park Flowers, please contact us using the details provided on our website or at our physical store. We are committed to resolving any concerns and ensuring your data is managed in line with legal obligations.