Hampstead Florist Privacy Policy

Introduction

This privacy policy sets out how Hampstead Florist collects, uses, stores, shares, and protects your personal information in accordance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Hampstead Florist from Hampstead and the surrounding districts. Your privacy is very important to us, and we are committed to protecting your personal data and respecting your rights.

What Data We Collect

When you interact with Hampstead Florist and place an order, we may collect the following categories of personal data:

• Contact Information: Name, delivery address, billing address, phone number, and occasionally, the name and contact details of recipients.
• Order Details: Products ordered, order value, payment method, instructions or notes provided, and delivery preferences.
• Payment Information: Limited details relevant to processing payment, such as the last four digits of your payment card (full card data is processed securely by our payment providers and not stored by us).
• Communications: Correspondence with our customer service (such as phone enquiries or written communications), including feedback, queries, and complaint details.
• Technical Data: We may collect IP addresses, browser type, and device information for the purposes of website functionality and security.

Lawful Basis for Processing Your Data

We only process your personal data where we have a lawful basis. The primary grounds are:

• Contractual necessity: To process and deliver your order, including communication about your purchase.
• Legal obligation: To comply with legal requirements (such as tax or accounting regulations).
• Legitimate interests: To improve our products and services, ensure the security of our website, and handle queries or feedback, provided these interests do not override your rights and freedoms.
• Consent: For marketing communications (if you opt-in), we will only contact you if you have given your explicit consent. You can withdraw this consent at any time.

How We Use Your Data

Hampstead Florist uses your personal data to:

• Fulfil your order, including processing payment and arranging flower delivery.
• Communicate with you about your order or any issues that may arise.
• Respond to customer service enquiries, feedback, or complaints.
• Maintain internal records for accounting, regulatory, and business analysis purposes.
• Improve our website functionality and enhance the user experience.
• Send you marketing information and special offers if you have specifically consented to receive these communications.

Data Retention Periods

Your personal data is retained only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Typically, order-related data is retained for a period of up to seven years to comply with accounting regulations. Marketing consents and correspondence are retained until you withdraw your consent or for a reasonable period following your last interaction with us. Once your data is no longer required, it will be securely deleted or anonymised.

Third-Party Processors

We work with trusted third-party service providers (‘processors’) who handle certain aspects of your personal data on our behalf. These include:

• Payment processors – for secure payment handling.
• Delivery couriers – to fulfil physical delivery of your orders.
• IT and website support providers – to maintain the security and performance of our systems.

All such processors are required to comply with relevant data protection laws and only act upon our instructions. We do not sell or rent your personal data to any third parties for marketing purposes.

Your Rights Under GDPR

As a Hampstead Florist customer, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the information we hold about you.
• Right of rectification: You can correct or amend your personal data if it is inaccurate or incomplete.
• Right to erasure: You can request the deletion of your personal data where there is no lawful reason for it to be retained.
• Right to restrict processing: Under certain circumstances, you may request to restrict our use of your data.
• Right to data portability: You may request a copy of your data in a commonly used electronic format for your own use or to share with another provider.
• Right to object: You can object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Where you have given consent, you are entitled to withdraw it at any time.

If you wish to exercise your rights, please contact us using the contact details on our website. We may undergo identity verification to ensure your data’s security.

Data Security

We take the security of your personal information seriously. Appropriate technical and organisational measures are in place to safeguard your data from unauthorised access, accidental loss, disclosure, or destruction. This includes secure systems, password protection, and limiting access to staff and contractors who require it for their role.

Policy Updates

This privacy policy is regularly reviewed and may be updated from time to time. Any significant changes will be clearly communicated on our website. We recommend reviewing this policy when placing a new order or interacting with us to stay informed about how your information is handled.

Contact and Complaints

If you have any questions about this privacy policy, how your personal data is processed, or if you wish to make a complaint, please refer to our contact details on the website. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Thank you for trusting Hampstead Florist with your information. We are dedicated to protecting your privacy and giving you choice and control over your data.