Privacy Policy for Florist Belsize Park Customers

Our Commitment to Your Privacy

At Florist Belsize Park, your privacy and the protection of your personal information are extremely important to us. This Privacy Policy explains how we collect, use, store, and share your data in accordance with the General Data Protection Regulation (GDPR). The policy applies to all customers who place orders with Florist Belsize Park from Belsize Park and its surrounding districts.

Personal Data We Collect

We collect certain types of personal information necessary to process orders, improve our services, comply with legal requirements, and communicate with you effectively. The categories of information we may collect include:

  • Identity information: Such as your name and title
  • Contact information: Postal address, delivery address, and phone number
  • Order details: Items purchased, delivery preferences, card messages, recipient details
  • Payment information: (processed securely by approved payment processors; we do not store your full card details)
  • Correspondence: Communications with us by phone, letter, or through our website
  • Technical information: IP address, browser type, operating system, and website interactions, collected via cookies or similar technologies (as applicable)

Lawful Basis for Processing Your Data

Under GDPR, we process your personal data based on the following lawful grounds:

  • Contractual necessity: We need to use your data to fulfill your order, arrange delivery, and provide customer service.
  • Legal obligations: Some data is required for accounting, tax, and regulatory purposes.
  • Legitimate interests: We may use your data to improve our products and services, prevent fraud, and provide information about your order. Where legitimate interest is the basis, we ensure our interests do not override your rights.
  • Consent: If you opt-in to receive marketing communications, we rely on your consent, which you can withdraw at any time.

How We Use Your Data

Florist Belsize Park uses your data to facilitate a smooth and personalized experience, including:

  • Processing and delivering your flower orders
  • Managing payments and refunds
  • Communicating with you about your purchase
  • Responding to enquiries and providing support
  • Fulfilling our legal and regulatory obligations
  • Improving our services and website
  • With your consent, sending you relevant news or special offers

Disclosure of Your Data to Processors

We work with trusted third-party service providers (also known as data processors) to support our business operations and fulfill your orders. These include:

  • Delivery companies and couriers, for order delivery
  • Payment processors, to handle transactions securely
  • IT and website service providers, who maintain our online and communications systems
  • Accountants or auditors, for legal and financial compliance

We require all processors to protect your data and never allow them to use it for their own purposes. Your data is never sold or shared with third parties for unrelated marketing.

How Long We Keep Your Data

Florist Belsize Park keeps your personal data only as long as is needed for the purposes outlined in this policy, and in accordance with applicable laws. Typically this means:

  • Order and purchase information: retained for up to 7 years to comply with accounting and tax regulations
  • Enquiries or correspondence: kept for up to 2 years
  • Marketing preferences: maintained until you withdraw consent or opt-out
  • Data collected through cookies or similar tools: as specified in our Cookies Policy (available upon request)

After these periods, your data will be securely deleted or anonymized.

Your GDPR Rights

As a customer, you have several rights regarding your personal data:

  • Right to access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You may request deletion of your data when it is no longer necessary for us to keep it, subject to legal constraints.
  • Right to restriction: You can request we limit how we use your data in certain circumstances.
  • Right to data portability: You are entitled to a copy of your data, in a structured, commonly used, and machine-readable format, and can ask us to transfer it to another provider.
  • Right to object: You may object to our processing of your data based on legitimate interests or direct marketing.
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw it at any time.

To exercise your rights, please contact us using the details provided on our website or at our shop premises. We will respond to all valid requests within one month, unless the request is particularly complex, in which case we will let you know of any delay.

How We Protect Your Information

We use appropriate physical, technical, and organizational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our staff are trained on data protection, and access to your information is strictly controlled.

International Data Transfers

Your personal data is usually processed within the United Kingdom (UK) or European Economic Area (EEA). If data is transferred outside these regions (for example, via a cloud service provider), we ensure adequate protections as required by GDPR.

Changes to This Privacy Policy

We may update this policy occasionally to reflect changes in our data practices or legal requirements. The latest version will always be available in-store and on our website. If substantial changes are made, we will notify you where appropriate.

Contacting Us

If you have questions or concerns about this policy or how Florist Belsize Park handles your data, please get in touch with us using the contact details provided on our website or at our shop premises in Belsize Park.

If you are not satisfied with our response, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).