Nunhead Florist Privacy Policy

Introduction

This Privacy Policy describes how Nunhead Florist (“we”, “us”, or “our”) collects, uses, and protects your personal data whenever you place an order with us. This policy applies to all customers placing orders from Nunhead and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and upholding your rights regarding your personal information.

What Data We Collect

When you place an order with Nunhead Florist, we may collect various types of data to process your request and deliver our services. The categories of personal data we typically collect include:

• Personal identification information: Your full name, billing and delivery address, contact telephone number.
• Order-related details: Product selections, delivery instructions, preferred delivery date, message for card (if requested).
• Payment data: Payment card information (processed securely via third-party providers), transaction details, and receipts.
• Communication information: Correspondence with us, such as feedback, complaints, or queries related to your order.

We do not intentionally collect sensitive personal categories (special category data) unless required to fulfil your specific instructions (in which case, you will be asked for explicit consent).

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to process your personal information. We rely on the following bases:

• Contractual Necessity: Most personal data is processed to fulfil a contract with you, specifically to process, fulfill, and deliver your order.
• Legal Obligation: We may process your data when required by law, for example to comply with accounting or tax regulations.
• Legitimate Interests: We may use your data to improve our services, handle feedback, or resolve disputes, as long as these activities do not override your rights and freedoms.
• Consent: Where processing is not covered by the above, such as for certain types of marketing communications, we will request your explicit consent, which you are free to withdraw at any time.

How We Use Your Personal Data

We use your information solely for the purposes it was collected, including:

• Processing and fulfilling your order (including arranging delivery where necessary).
• Managing your account and communicating order updates, feedback or queries.
• Maintaining accurate sales and accounting records, as required by law.
• Improving our products and customer service through analysis of anonymised order data.
• Subject to your preferences, contacting you with information about our products or special offers (only if you have opted in to receive such communications).

How We Store and Retain Your Data

Your personal data is stored securely using appropriate technical and organizational measures to protect it from unauthorized access, alteration, or disclosure. We retain personal data for no longer than necessary to fulfil the purposes outlined in this policy:

• Order information: Kept for up to 6 years to comply with accounting and tax requirements.
• Marketing preferences: Held until you withdraw consent or request erasure.
• Correspondence: Retained as long as necessary to resolve the matter or for audit purposes.

Once data is no longer needed, it is securely deleted or anonymised.

Third-Party Processors

To deliver our services, we may share your personal data with trusted third-party processors. These may include:

• Payment service providers (for secure payment processing).
• Delivery services or couriers, for fulfilling your delivery requirements.
• IT suppliers or website hosting services that help us operate our systems and website.
• Accountancy or regulatory bodies, as required by law.

All our third-party partners are bound by contractual obligations to safeguard your data in line with GDPR requirements and may only process it on our instructions.

Your Rights Under GDPR

Under the GDPR, you have a range of rights concerning your personal data. These include:

• The right to access – You can request a copy of the personal information we hold about you.
• The right to rectification – You can ask us to correct inaccurate or incomplete information.
• The right to erasure – In certain circumstances, you can ask us to delete your data.
• The right to restrict processing – You may ask us to restrict the processing of your data in certain situations.
• The right to data portability – You may request that we transfer your data to another organization, where technically feasible.
• The right to object – You may object to processing based on legitimate interests or direct marketing, at any time.
• The right to withdraw consent – Where we rely on your consent, you may withdraw this at any time without affecting the lawfulness of past processing.

To exercise your rights, please contact us using the methods set out at the end of this policy. We may require proof of identity to process your request for the protection of your data.

Policy Updates and Contact

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be made available to you, and material changes will be communicated where appropriate. If you have any questions regarding this policy or about how we handle your personal data, please contact us using the methods provided on our website or in-store.

Jurisdiction and Complaints

This policy is governed by UK data protection laws. Customers within Nunhead and surrounding districts are protected under local and GDPR regulations. If you have concerns about our handling of your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

We value your trust and your privacy. Thank you for choosing Nunhead Florist.