Florist Hackney Privacy Policy

Overview

This Privacy Policy sets out how Florist Hackney ('we', 'our', or 'us') collects, processes, stores, and shares your personal information when you place orders with us in Hackney and the surrounding districts. We respect your privacy and are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR). Please read this policy carefully to understand how your information is handled.

Scope of This Policy

This policy applies to all customers who place an order for goods or services with Florist Hackney, whether directly through our website, by telephone, or in person in Hackney and the neighbouring districts. By placing an order with us, you acknowledge that you have read and understood this Privacy Policy.

Personal Data We Collect

We may collect and process the following categories of personal data to fulfil your orders and provide our services:

• Identity data - such as your name and title
• Contact data - such as your delivery address, billing address, and telephone number
• Order data – products ordered, delivery preferences, and notes you provide us
• Payment data – information required to process your payments (note that we do not store your full card details; these are managed by our payment processors)
• Correspondence data – details of any communications you have with us, including customer queries and feedback
• Technical data – such as your IP address and browser type if you use our website

Lawful Basis for Processing

We process your personal data only where a lawful basis applies, as required by the GDPR:

• Contractual Necessity: To process and deliver your orders, and provide customer support. This includes managing payment, delivery, and communication related to your purchase.
• Legal Obligation: To comply with legal requirements, such as maintaining records for tax and accounting purposes and responding to requests by regulatory authorities.
• Legitimate Interests: To improve our services, manage and protect our business, and handle queries or complaints. We balance these interests against your privacy rights.
• Consent: For purposes such as sending you marketing communications (when you have given express consent). You have the right to withdraw your consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• To process, fulfill, and deliver your orders
• To manage payments, fees, and charges
• To communicate with you about your order or respond to your inquiries
• To keep records as required by law
• To improve the quality of our products and services
• To send you marketing communication if you have opted in

Data Retention

We will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Generally, we will keep order-related data for up to 7 years to comply with legal and tax requirements. Any data used for marketing purposes will be retained until you withdraw your consent or opt out of such communications. Technical data not linked to your order will be retained for a limited period to support website operation and security.

Data Sharing and Processors

Your personal data may be shared with selected third-party service providers (data processors) to enable us to deliver our services to you. These include:

• Payment processors – to handle your payments securely. We do not retain full card or bank account details.
• Delivery partners – for the efficient fulfilment of your order
• IT service providers – for website hosting and order management systems
• Professional advisers – such as accountants or legal advisors, where required

All our processors are required to respect the confidentiality and security of your personal information and to process it only on our instructions in accordance with the law. We do not sell or rent your data to third parties.

International Transfers

Wherever possible, your data is processed within the United Kingdom and the European Economic Area (EEA). If we transfer your personal data outside the EEA, we will ensure that appropriate safeguards are implemented to protect your information as required by the GDPR.

Your Rights

As a data subject, you have the following rights in relation to your personal data under the GDPR:

• Right of access – to request a copy of the personal data we hold about you
• Right of rectification – to request correction of any inaccurate or incomplete data
• Right to erasure – to request deletion of your data in certain circumstances (“right to be forgotten”)
• Right to restriction – to restrict how we process your data in specific cases
• Right to data portability – to receive your data in a structured, commonly-used format
• Right to object – to object to certain types of processing, such as direct marketing
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, you may contact us using the details provided at the end of this policy or by any method you used to place your order. We will respond to your request in accordance with applicable laws and within one month.

Security of Your Data

We take appropriate security measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction. This includes technical, physical, and organisational protections. Our staff are trained in data protection, and our service providers meet strict security requirements.
If you have reason to believe that your interaction with us is no longer secure, you should promptly notify us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. The latest version will be made available upon request and updated accordingly on our website where applicable.

Contact Information

If you have any questions or concerns about this Privacy Policy, the processing of your personal data, or wish to exercise your GDPR rights, please contact us using your usual means of communication when placing orders. We are committed to resolving any queries promptly and transparently.