Canonbury Florist Privacy Policy

Introduction

This Privacy Policy explains how Canonbury Florist collects, uses, stores, and protects your personal data when you place orders from Canonbury and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and safeguarding your privacy. This policy applies to all our customers and visitors who use our services or interact with us while arranging orders.

What Personal Data We Collect

Canonbury Florist collects different types of personal data to ensure we can provide and improve our floral services. The data we may collect includes:

• Identity Data: Name, and occasionally titles (such as Ms., Mr., etc.).
• Contact Data: Delivery address, billing address, postcode, and telephone number for communication relating to your order.
• Order Details: Information on the products or arrangements ordered, customisation instructions, or special requests.
• Recipient Data: Name, address, and contact number of the individual receiving flowers (if different from the purchaser).
• Payment Data: Transaction information. Actual card details are not stored by Canonbury Florist but are processed directly by our approved payment providers.
• Technical Data: IP address, browser type, device type, and cookies, used when you visit our website to help us improve user experience and ensure website security.

Lawful Basis for Processing Your Data

Canonbury Florist processes your personal data based on the following lawful bases outlined under GDPR:

• Contractual Necessity: Most data we process (such as contact details and delivery information) is required to fulfil the order contract made between you and Canonbury Florist. We cannot provide our services without this information.
• Legitimate Interests: Some data is processed to ensure the efficient running of our business, to improve our services, or to handle customer queries or complaints. We only collect data that does not override your individual rights and freedoms.
• Legal Obligation: Certain data may be retained to comply with legal requirements, such as record-keeping for tax or accounting purposes.
• Consent: We may request your explicit consent for sending marketing communications or promotional offers. You may withdraw your consent at any time by contacting us.

How We Use Your Personal Data

We use your personal data to:

• Process and deliver your order, including notifying you or your recipient about delivery details.
• Manage payments and refunds.
• Respond to your queries, requests, or complaints.
• Improve our products, services, and website functionality.
• Comply with legal and regulatory obligations.
• Where consent is provided, send you occasional promotional communications or service updates.

Data Retention Policy

Canonbury Florist keeps your personal data only as long as necessary for the purposes it was collected, including for satisfying legal, accounting, or reporting requirements. The data retention periods include:

• Order and Delivery Data: Typically retained for up to 7 years as required by accounting and tax laws.
• Marketing Communications: Kept until you unsubscribe or withdraw consent.
• Technical and Usage Data: Usually retained for a maximum of 2 years to analyse trends and manage website security.

Once your data is no longer required, it will be securely deleted or anonymised so that it can no longer be linked to you.

Data Processors and Third Parties

Canonbury Florist may share your personal data with trusted third-party providers who act as data processors on our behalf. These may include:

• Delivery partners to fulfil flower deliveries.
• Payment service providers to process card transactions securely.
• IT and system administration providers who help us manage our website and internal systems.

All processors are required to respect the confidentiality and security of your data and to process it only according to our instructions, in compliance with GDPR.

We do not sell or disclose your data for commercial purposes to third parties without your explicit consent, unless required by law or in connection with legal proceedings.

Your Rights Under GDPR

You have important rights regarding your personal data:

• Right of Access: You can request a copy of the personal data that we hold about you.
• Right to Rectification: You may ask us to correct or update any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your data in certain circumstances, such as when there is no longer a lawful reason for us to retain it.
• Right to Restriction of Processing: You may ask us to limit how your data is processed in specific circumstances.
• Right to Data Portability: Where technically feasible, you can request that your data be transferred to you or another service provider in a machine-readable format.
• Right to Object: You have the right to object to certain processing, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time.

If you wish to exercise any of your rights, please contact us by the means provided on our website. We may need to confirm your identity before acting on your request to ensure the security of your data.

Policy Review and Updates

We may update this Privacy Policy from time to time to reflect legal or operational changes. The date of the most recent revision will be indicated at the top of the policy. You should review this policy periodically to stay informed of how we protect your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy or our data protection practices, please get in touch using the contact information found on our website. If you are unsatisfied with our response, you may have the right to lodge a complaint with the relevant supervisory authority.

Thank you for trusting Canonbury Florist. We value your privacy and are committed to protecting your personal information.