Colindale Florist GDPR Privacy Policy

Introduction

This Privacy Policy explains how Colindale Florist collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). Our policy applies to all customers who place orders with Colindale Florist, whether for delivery or collection, from Colindale and surrounding districts. We are committed to safeguarding your privacy and ensuring transparency in our data processing activities. Please read this policy carefully to understand your rights and how we manage your information.

What Data We Collect

When you interact with Colindale Florist, we collect and process the following categories of data to provide you with our floral services:

• Personal Identification Information: Such as your full name, delivery address, billing address, and contact details (e.g., phone number where applicable).
• Order and Transaction Information: Including purchase history, payment method (note: we do not store card details), delivery preferences, and order notes.
• Correspondence: Records of communications you make with us, such as messages regarding order queries, feedback, or special requests.
• Technical Data: Anonymous data such as IP address, browser type, and device information collected through our website for security and analytics.

Lawful Bases for Processing

Under the GDPR, we may only process your personal data where we have a lawful basis to do so. The lawful bases on which Colindale Florist relies include:

• Contractual Necessity: Processing your data is necessary for us to fulfil your flower orders and deliver requested services.
• Legal Obligation: We may process and retain parts of your data to fulfil government, tax, or regulatory requirements.
• Legitimate Interests: We have a legitimate interest in communicating with you about your order, improving our services, and ensuring security, provided such interests are not overridden by your fundamental rights.
• Consent: For activities not covered by the bases above, such as direct marketing (optional), we seek your explicit consent. You may withdraw consent at any time.

How We Use Your Data

Colindale Florist uses your information for the following purposes:

• To process and deliver your orders accurately and on time.
• To communicate with you about your order, including confirmation and delivery updates.
• To respond to your inquiries, special requests, or feedback.
• To maintain business and financial records as required by law.
• To enhance your experience and improve our products and services.
• To prevent and detect fraud or abuse on our website and within our services.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above, including meeting any legal, accounting, or reporting obligations. Typically, transactional and order data is retained for up to six years in accordance with accounting and tax requirements. Communications and correspondence may be retained for a shorter period unless related to ongoing customer service.

Once your data is no longer needed, we will securely delete or anonymise it so it can no longer be associated with you.

Third-Party Data Processors

To provide you with a seamless experience, Colindale Florist may share certain data with trusted third-party partners who act as data processors on our behalf. These may include:

• Payment processing providers (for transaction handling—note: we do not store your card details).
• Delivery partners and couriers (to facilitate delivery to the address provided).
• IT, web hosting and maintenance providers (for website functionality and security).
• Accountancy and audit service providers (for legal and regulatory compliance).

Each processor is contractually bound to process your personal data only according to our instructions, comply with GDPR, and employ adequate security measures. We do not sell or disclose personal data for commercial purposes to third parties.

User Rights under GDPR

As a data subject, you have several rights under GDPR regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: You can ask us to suspend the processing of your information in certain circumstances.
• Right to Data Portability: You may request transfer of your information to another provider in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to processing under certain conditions, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority if you believe your rights have been infringed.

Security Measures

Colindale Florist implements technical and organisational measures designed to protect your personal data from unauthorised access, loss, misuse, alteration, or disclosure. These include encrypted transmission of data, secure password management for staff, regular training, and strict access controls. We regularly review these measures to maintain a high level of data security.

International Transfers

We generally process and store your data within the UK and European Economic Area. If it is necessary to transfer data internationally through our third-party processors, we ensure all protections required by GDPR are implemented, such as standard contractual clauses.

Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in legislation, our practices, or to clarify our commitment to your privacy. Any substantive changes will be communicated where appropriate, and the latest version will be available on our website.

Contact and Further Information

If you have questions about how Colindale Florist processes your personal data, wish to exercise your rights, or seek further information about our privacy practices, please contact us using the contact methods provided on our website or in-store. We are dedicated to assisting you with any privacy-related queries or concerns.