Harold Wood Florist Privacy Policy Overview

Introduction

This Privacy Policy explains how Harold Wood Florist ("we", "us", or "our") uses, stores, and protects your personal data when you place orders with us, either online, by phone, or in person. This policy applies to all customers placing orders with Harold Wood Florist from Harold Wood and the surrounding districts. We are committed to ensuring your information is handled in accordance with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws.

What Data We Collect

When you interact with Harold Wood Florist, we may collect and process the following personal information:

• Identity Data: Your name, title, and occasionally your age (for age-restricted purchases if applicable).
• Contact Data: Billing and delivery addresses, email addresses, and phone numbers.
• Order Details: Information about your floral purchase, messages to recipients, and delivery instructions.
• Payment Data: Transaction details (note: we do not store full credit or debit card details; these are securely processed by our payment providers).
• Technical Data: IP address, browser type and version, time zone settings, and details about your visit to our website (where applicable).
• Correspondence: Records of communication with you, such as customer service queries or feedback.

Lawful Basis for Processing

We process your personal data under several lawful bases defined by the GDPR:

• Contract Necessity: To fulfil your order and provide the services you request, including delivery and customer support.
• Legal Obligation: To comply with UK laws, tax, or accounting requirements.
• Legitimate Interests: For purposes such as improving our services, handling customer queries, and direct communications relevant to your order (but never for unsolicited marketing without consent).
• Consent: Where required, especially for marketing purposes. Consent can be withdrawn at any time.

Data Retention

Your personal data will only be retained for as long as is reasonably necessary for the purposes set out in this policy. Typically, we retain customer order information for up to seven years to comply with legal, taxation, and audit requirements. After this period, data is securely deleted or anonymised. If you would like more specific details on retention periods, please contact us via our published contact details.

Use of Data Processors

Harold Wood Florist may share your personal information with trusted third-party service providers (or "processors") who help fulfil parts of our service. These processors may include:

• Payment processing companies for handling transactions securely.
• Delivery services and couriers for order fulfilment.
• IT and email service providers for order notifications or updates.
• Accountancy firms for auditing and compliance purposes.

All data processors are required to treat your information in compliance with the GDPR, to use it exclusively for the agreed purposes, and to protect it against unauthorised access or disclosure. We never sell customer data to third parties.

International Transfers

Generally, your personal information is stored and processed within the UK. In rare circumstances where trusted service providers are located outside the UK or European Economic Area (EEA), we ensure adequate safeguards are in place to protect your personal data, in accordance with UK GDPR requirements.

Your Rights as a Data Subject

Under UK GDPR, you have a range of rights concerning your personal data held by Harold Wood Florist:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to inaccurate or incomplete data.
• Right to Erasure: You can ask for your data to be deleted, where there is no compelling reason for us to continue processing it (subject to our legal obligations).
• Right to Restrict Processing: You can limit how your data is used in specific circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your data for direct marketing or due to your particular situation.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw consent at any time.

To exercise any of these rights, please contact us using our published communication channels. We may need to verify your identity before processing your request.

Security of Your Data

We implement appropriate technical and organisational measures to safeguard your personal data, such as secure servers, limited access protocols, and regularly updated security processes. While we work diligently to protect your information, no system can be guaranteed as 100% secure. Should any data breach occur, we will follow all legal obligations to notify authorities and affected individuals where necessary.

Updates to this Privacy Policy

We keep this Privacy Policy under regular review and may update it from time to time to reflect changes in laws, regulations, or our data processing activities. The most current version will always be available in-store and on our website. Please check this page periodically for the latest information.

Contact Information and Concerns

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please reach out to us via the published methods on our website or in person at our Harold Wood shop. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Thank you for trusting Harold Wood Florist with your order and your personal data. We are committed to ensuring your privacy and data protection rights.