Brondesbury Florist GDPR Privacy Policy

Privacy Policy: Brondesbury Florist Orders in Brondesbury and Surrounding Districts

At Brondesbury Florist, we value the trust you place in us when ordering floral products and services. This Privacy Policy sets out how we collect, use, store, share, and protect your personal data under the General Data Protection Regulation (GDPR). This Policy applies to all individuals placing orders with Brondesbury Florist from Brondesbury and the surrounding districts.

What Data We Collect

When you place an order or interact with our business, we collect the following categories of personal data:

• Identity Information: Your full name, and, where appropriate, titles (e.g., Mrs, Dr).
• Contact Information: Delivery address, billing address, phone number, and, if provided, email address.
• Order Details: Information about products ordered, delivery instructions, messages for recipients, and purchase history.
• Recipient Information: Name and delivery details of the person receiving your order.
• Payment Information: Payment method details (note: we do not store or have access to your full card number or bank account information; these are processed securely by third-party payment processors).
• Correspondence: Any communications with us by phone, in person, or in writing.

Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful reason to collect and process your personal data. Our lawful bases include:

• Contract: Processing necessary to fulfill your order or provide a requested service (e.g., name, address for delivery).
• Legal Obligation: Compliance with legal requirements related to taxes, transaction records, and fraud prevention.
• Legitimate Interests: To manage and improve our services and communications, resolve queries, or understand our business performance. We ensure our interests do not override your rights or freedoms.
• Consent: Where required (e.g., for marketing communications), we will ask for your consent and allow you to withdraw it at any time.

How We Use Your Data

We use your personal data to:

• Process and deliver your floral orders, including personalized messages and instructions.
• Manage payments and fulfil accounting or legal obligations.
• Communicate with you regarding your order, feedback, or service-related queries.
• Manage requests, complaints, and after-sales support.
• Improve our products, services, and customer experience.
• With your permission, send you marketing information about our products or special offers.

Retention of Your Data

We retain your personal data only as long as necessary for the purposes stated in this Policy and to comply with legal, accounting or reporting requirements. Typically, records of completed transactions, order history, and invoice data are held for a period of up to seven years to comply with UK tax and accounting regulations. Messages and correspondence that do not require longer retention may be securely deleted sooner. After the retention period expires, all personal data is securely destroyed or anonymized.

Processors and Data Sharing

We only share your personal data with third parties when necessary for providing our service, legal compliance, or with your consent. Processors and recipients may include:

• Payment service providers: To securely process your payments (e.g., card processors).
• Delivery couriers: To deliver your orders appropriately, sharing only necessary data such as recipient name and address.
• IT and system support providers: Who assist in running our ordering platform or maintaining our systems.
• Legal or regulatory authorities: If required under law.

We require all third-party service providers to respect the security of your data and to treat it in accordance with the law. Our contracts ensure your data will not be used for unrelated purposes and will be processed only according to our instructions.

International Transfers

Brondesbury Florist primarily stores and processes your data within the United Kingdom and European Economic Area (EEA). If it becomes necessary to transfer personal data outside of these areas, we ensure appropriate safeguards are in place, in line with data protection law.

How We Protect Your Data

We use suitable technical and organizational measures to safeguard your information. These may include secure order processing systems, encryption where appropriate, locked storage, and ongoing staff training on data protection. Access to your data is limited to personnel who require it to process your order or fulfill legal obligations.

Your Rights Under GDPR

As a customer placing orders with Brondesbury Florist, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete information.
• Right to Erasure: You can request deletion of personal information no longer needed for the purposes it was collected, subject to any legal obligations we may have to retain it.
• Right to Restrict Processing: You may ask us to temporarily suspend the processing of personal data in certain circumstances.
• Right to Data Portability: Where applicable, request a copy of your data for transfer to another provider.
• Right to Object: You have the right to object to our processing where our lawful basis is legitimate interests or where your data is used for marketing.
• Right to Withdraw Consent: Where consent is relied upon (such as marketing), you may withdraw consent at any time.
• Right to Complain: If you believe your rights have been infringed, you may lodge a complaint with the appropriate supervisory authority.

Policy Scope and Changes

This Privacy Policy covers all customers placing orders with Brondesbury Florist in Brondesbury and surrounding districts. We may update this Policy to reflect changes in law or our business practices. Significant changes will be notified to you when appropriate, and the updated Policy will be available upon request and at our main premises.

Contact and Further Information

If you have questions about this Privacy Policy or about your rights when placing a Brondesbury Florist order, please contact us in writing or in person at our store. We are committed to protecting your privacy and supporting your data protection rights at all times.