Privacy Policy for Hither Green Florist Customers

Introduction

This Privacy Policy describes how Hither Green Florist collects, processes, and protects personal data from customers placing orders in Hither Green and surrounding districts. We are committed to ensuring your privacy and complying with the General Data Protection Regulation (GDPR).

Who This Policy Applies To

This Privacy Policy applies to all customers who place orders with Hither Green Florist, whether online, in-store, or over the phone, within Hither Green and its nearby areas. By engaging our services, you acknowledge the collection and use of your personal data as outlined below.

What Data We Collect

To fulfill your order and provide a seamless experience, Hither Green Florist collects the following categories of personal data where applicable:

• Contact Information: Name, delivery address, billing address, and phone number.
• Order Details: Product selections, messages for cards, and delivery instructions.
• Payment Information: Limited payment information (such as partial card numbers) processed securely through payment processors (we do not store full payment details).
• Correspondence: Communication between you and our customer service team, including enquiries and feedback.
• Technical Data: IP address, device type, and limited browsing activity relating to order placement (where applicable to online orders).

Lawful Basis for Data Processing

Hither Green Florist only processes your personal data where there is a lawful basis under the GDPR. The primary lawful bases on which we rely include:

• Contractual Necessity: We process your data to perform our contract with you and fulfill your order (Article 6(1)(b)).
• Legal Obligation: We may process data to comply with legal or regulatory obligations, such as accounting or tax requirements (Article 6(1)(c)).
• Legitimate Interests: In some instances, we process data for our legitimate business interests, such as improving our services or handling enquiries, provided these interests do not override your rights (Article 6(1)(f)).
• Consent: Where required (such as for certain marketing communications), we process your data based on your explicit consent (Article 6(1)(a)). You may withdraw this consent at any time.

How We Use Your Information

We use your data to:

• Process and deliver your orders, including confirming delivery details and contacting you about your order.
• Process payments securely via third-party payment processors.
• Respond to your service enquiries or feedback.
• Comply with legal obligations, such as record keeping for accounting purposes.
• Improve our services and understand customer needs in Hither Green and surrounding districts.
• Send you marketing updates if you have given explicit consent (optional).

Retention of Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our retention periods are as follows:

• Order and contact data: Retained for up to 7 years to comply with legal obligations.
• Marketing data: Retained until you withdraw consent or opt out.
• Customer enquiries: Retained for up to 2 years for reference or service improvement.
• Payment data: We do not store full card information; payment details are handled directly by our payment processors.

Data Processors and Sharing

Hither Green Florist may share your personal data with trusted third-party processors who assist in delivering our services. These include:

• Payment processors: For secure processing of payments.
• Delivery services or couriers: To ensure your order is delivered promptly.
• IT service providers: Who support our order management and customer communication systems.

All data processors are reviewed to ensure they comply with GDPR and process your data only on our instructions. We do not sell or trade your personal information to third parties.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data processed by Hither Green Florist:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any incomplete or inaccurate information.
• Right to Erasure: Request deletion of your personal data where there is no legitimate reason for us to retain it (also known as the "right to be forgotten").
• Right to Restrict Processing: Ask us to pause processing of your data under certain circumstances.
• Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time when processing is based on your consent.

If you wish to exercise any of these rights, please contact us using the details provided in-store or via our website.

Data Security

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or alteration. These include secure order processing systems and restricted access to personal data on a need-to-know basis.

International Data Transfers

We do not routinely transfer your personal data outside the United Kingdom. Where it is necessary to use third-party processors located outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place to comply with GDPR requirements and protect your privacy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact and Complaints

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your GDPR rights, please contact us directly in-store or through our official website contact form. Should you have a complaint about how we handle your data, you also have the right to contact the Information Commissioner's Office (ICO) in the United Kingdom.

By placing an order with Hither Green Florist, you acknowledge and accept the practices described in this Privacy Policy.