Florist Holborn GDPR Privacy Policy

Introduction

Florist Holborn is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data in connection with all flower orders and related services from Florist Holborn, whether you are located in Holborn itself or the surrounding districts. We process personal data in alignment with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws. By placing an order or interacting with our services, you acknowledge and agree to this Privacy Policy.

What Personal Data We Collect

When you place an order with Florist Holborn or otherwise interact with us, we may collect and process the following categories of personal data:

  • Contact Information: such as your full name, billing address, delivery address, telephone number, and other similar identifiers.
  • Order Information: details of the flower arrangements or gifts you select, recipient’s name and address, and any delivery instructions.
  • Payment Information: partial, non-sensitive payment details as processed by secure payment providers (we do not store your full card details).
  • Communication Data: records of correspondence between you and Florist Holborn, including queries or complaints.
  • Technical Data: device and browser type, IP address, and website usage statistics collected through analytical tools, for improving our website quality and service.

Purposes and Lawful Basis for Processing Data

Florist Holborn collects and processes your personal data only where we have a valid lawful basis under UK GDPR. The purposes and legal bases include:

  • Processing Your Orders: To fulfil orders and deliver purchases. Lawful basis: performance of a contract.
  • Customer Service: To respond to queries, resolve issues, and provide after-sales support. Lawful basis: legitimate interests.
  • Payment Processing: To accept and process payments securely. Lawful basis: performance of a contract.
  • Marketing and Updates: With your consent, to send promotional or service-related communications. Lawful basis: consent (where given).
  • Website Improvement and Security: To analyse website usage, maintain security, and enhance user experience. Lawful basis: legitimate interests.
  • Legal or Regulatory Compliance: To comply with our legal obligations, such as tax or fraud prevention. Lawful basis: legal obligation.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting requirements. Our standard retention periods are as follows:

  • Order and Transaction Data: Typically retained for up to 7 years from the date of order due to legal and regulatory obligations.
  • Customer Service Communications: Retained for up to 2 years following the last contact.
  • Marketing Data: Where you have given consent, retained until you opt out or withdraw consent.
  • Technical Data: Aggregated and anonymised analytics data may be retained for website and service improvement; personal identifiers are retained no longer than 12 months.

When personal data is no longer required, it will be securely deleted or anonymised.

Data Processors and Sharing

Florist Holborn only shares your personal data when necessary and in accordance with GDPR requirements. Your data may be processed by the following types of trusted third-party processors:

  • Payment Service Providers: To handle payments quickly and securely.
  • Delivery and Logistics Partners: To ensure your order reaches the correct address on time.
  • IT and Hosting Providers: For secure data storage, website infrastructure, and analytics.
  • Marketing Service Providers: Only where you have consented to receive communications.

All third-party processors are required to adhere to strict privacy and security standards. We do not sell or rent your personal data to any third parties for marketing purposes. Data may be disclosed if legally obligated, for example to law enforcement agencies.

Your Rights as a Data Subject

Under the UK GDPR, you have several rights with respect to your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right of Rectification: You can request that any inaccurate or incomplete data is corrected.
  • Right to Erasure: You can request deletion of your personal data, subject to legal requirements.
  • Right to Restrict Processing: You can ask us to limit how your data is used.
  • Right to Data Portability: You can request that your data be moved or transferred to another service provider where technically feasible.
  • Right to Object: You can object to how we process your data in certain situations, such as direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time.
  • Right to Lodge a Complaint: If you believe your rights are not being respected, you can contact the relevant data protection authority.

International Data Transfers

Your data may be transferred or stored outside the United Kingdom, but only where adequate protections are in place as required by law. We ensure all overseas processors provide equivalent levels of data protection and process data in accordance with the UK GDPR requirements.

How We Protect Your Data

Florist Holborn implements technical and organisational measures to safeguard your personal data against unauthorised access, loss, destruction, or disclosure. These measures include secure servers, data encryption, regular system monitoring, and restricted employee access.

Policy Updates

This Privacy Policy may be revised from time to time to ensure continued compliance with data protection laws or to reflect changes in our practices. Any significant changes will be communicated via our website. We encourage you to review this Policy from time to time to stay informed about how we collect and protect your information.

Contacting Florist Holborn

If you have questions about this Privacy Policy or your data rights with Florist Holborn, please use our website’s contact form or write to our registered business address. We will endeavour to respond to your request promptly and in accordance with UK GDPR requirements.