Flowers Stroud Green Privacy Policy

Our Commitment to Your Privacy

This Privacy Policy explains how Flowers Stroud Green collects, processes, and protects your personal data in compliance with the UK General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flowers Stroud Green from Stroud Green and neighbouring districts.

What Data We Collect

When you place an order or interact with us, we collect and process the following types of data:

• Identity Data: Name, address (delivery and billing), and any notes you provide in connection with an order.
• Contact Data: Telephone number and, where provided, email address, to communicate updates or resolve queries.
• Transaction Data: Details about products purchased, order date and time, payment status, and necessary delivery instructions.
• Technical Data: Limited device and session details (such as IP address) to ensure website security and performance, but no personal marketing profiling.
• Correspondence Data: Records of inquiries, feedback, or complaints communicated through our contact forms or during the ordering process.

Lawful Basis for Processing

Under GDPR, we are required to have a lawful basis for processing your personal data. Flowers Stroud Green relies on the following bases:

• Contract: The processing of your data is essential to fulfill your order, manage payment, and ensure delivery as per your request.
• Legal Obligation: Certain records may be processed and stored in order to meet our legal, regulatory, and tax obligations.
• Legitimate Interests: We use your data to maintain high-quality customer service, improve our operations, and manage potential disputes or complaints. Such interests do not override your rights and freedoms.

How We Use Your Data

Your personal data is used strictly for the purposes for which it was collected, including to:

• Process and fulfill your flower order.
• Communicate with you about your order's status or respond to your inquiries.
• Resolve delivery or service issues.
• Maintain records required by law (such as tax records and invoices).
• Improve our services based on aggregate customer feedback.

Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy, and for compliance with statutory obligations. Specifically:

• Order records and associated personal data are generally kept for up to 7 years to meet accounting and tax law requirements.
• Correspondence relating to complaints or queries is stored for up to 2 years after resolution to ensure customer service continuity.
• Technical data (e.g., IP addresses in server logs) is retained for up to 12 months for security purposes.

After these periods, your personal data is securely deleted or anonymised so it can no longer be associated with you.

Data Processors

To provide the best possible service, we may share your data with trusted third-party processors who assist with:

• Payment processing (e.g., banks or card payment providers). We do not store card data itself—security is managed by our payment partners.
• Order management software or delivery platform providers strictly within the context of order fulfilment.
• Professional advisers (accountancy and legal) when required for compliance or legal purposes.

Each processor is carefully chosen, GDPR-compliant, and bound by contractual obligations to safeguard your information and use it only for intended purposes. We never sell your data or share it with any third party for marketing.

Your Rights Under GDPR

You have several rights with regard to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct or update inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data when it is no longer needed or there is no lawful basis for processing it.
• Right to Restrict Processing: Request us to limit the way we use your data under certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used format for transfer to you or another provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing (though Flowers Stroud Green does not use your data for direct marketing).

If you wish to exercise these rights, please contact us directly. We may ask you to verify your identity before fulfilling your request. Responses are typically provided free of charge and within one calendar month, unless requests are complex or numerous.

Data Security

We take the security of your information seriously and implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. This includes encryption, secure order processing, and strict access controls for staff and processors.

Policy Scope and Changes

This policy applies to all customers who place orders with Flowers Stroud Green from Stroud Green and the surrounding districts. We reserve the right to update this policy to reflect changes in our practices or regulatory frameworks. When changes are made, we will make an updated version available on our premises and website where applicable. Please review this policy periodically to stay informed about how we protect your information.

Contact and Complaints

If you have any concerns about your privacy or how your data has been handled, please contact us directly and we will seek to resolve your query promptly. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Thank you for trusting Flowers Stroud Green with your personal data. We are committed to respecting and protecting your privacy at every stage of your customer experience.