Florist Hither Green Privacy Policy

Introduction

This Privacy Policy describes how Florist Hither Green ('we', 'us', 'our') processes and protects the personal data of customers placing orders for flowers and related goods and services. This policy applies to all transactions made by individuals residing in Hither Green and its surrounding districts. We are committed to ensuring your privacy, compliance with the General Data Protection Regulation (GDPR), and full transparency over how we collect, use, and safeguard your information.

Personal Data We Collect

To fulfil your orders and provide our services, Florist Hither Green collects the following categories of personal data:

  • Contact Information: Full name, delivery address, contact number, billing address, and recipient details (if different from the purchaser)
  • Order Information: Product selections, order notes, delivery instructions, purchase history, and payment method information (note: actual card/bank details are processed securely by our payment processor and not stored by us)
  • Communication Data: Any correspondence you have with us, feedback, special requests or complaints
  • Website Usage Data: If you use our website, we may collect information about how you interact with our website, such as pages visited, the date and time of access, and device data through the use of cookies and similar technologies

Lawful Basis for Processing

We process your personal data based on the following lawful grounds as per Article 6 of the GDPR:

  • Contractual Necessity: To process and fulfil your order, deliver your purchase, and communicate updates regarding your order
  • Legal Obligation: To comply with applicable laws, regulations, and tax requirements, such as retaining transaction records
  • Legitimate Interests: To improve our products and customer service, handle customer queries or complaints, prevent fraud, and ensure the security of our business and customers
  • Consent: Where required, we may ask for your consent to send marketing communications or process optional information (you may withdraw your consent at any time)

How We Use Your Data

Your personal data helps us provide you with a smooth and secure ordering experience. In particular, we use your data to:

  • Process and deliver your orders to the specified recipient and address
  • Communicate essential information about your order status and delivery
  • Respond to your queries, feedback, and special requests
  • Comply with legal and regulatory requirements
  • Improve our products, services, website, and customer interactions
  • Send promotional offers or updates (with your explicit consent)

Data Retention

Florist Hither Green retains personal data only as long as necessary for the purpose it was collected. Generally, we will keep your order and contact information for up to seven years to comply with accounting and tax obligations. Customer correspondence is typically retained for no more than two years after the last interaction. Where we rely on your consent for processing (e.g., marketing), we retain that data until you withdraw your consent. Once the retention period expires, your data will be securely deleted or anonymised.

Processors and Data Sharing

To provide our services, we may share your data with trusted third-party service providers ("processors") who process data on our behalf:

  • Payment Processors: Securely process your payments for online and in-store transactions
  • Delivery Partners: Ensure the fulfillment and delivery of your flower orders
  • IT and Website Providers: Manage, host, and maintain our ordering systems and website
  • Professional Advisors: Accountants or legal advisers who assist with regulatory compliance

All processors operate under data protection agreements and are obligated to treat your personal data confidentially and securely. We do not sell, rent, or trade your personal data. Your data will not be transferred outside the European Economic Area (EEA) unless adequate safeguards are in place, and you are notified.

Your Data Protection Rights

Under the GDPR, you have the following rights with respect to your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data when it is no longer necessary or if processing is based on consent you have withdrawn
  • Right to Restriction: Request that we temporarily or permanently stop processing all or some of your data
  • Right to Object: Object to processing carried out on the basis of legitimate interests
  • Right to Data Portability: Request the transfer of your data to another provider
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

If you wish to exercise any of these rights, please contact us using the details provided on our website or in-store. We will respond to all legitimate requests within one month.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure servers, encrypted payment processing via trusted external providers, and staff training on data protection.

Changes to This Privacy Policy

This policy may be updated from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes through our website or by other means of contact you have provided.

Contact Us

If you have any questions about this Privacy Policy or your data, please get in touch using the details found on our website or by visiting our Hither Green store. We value your trust and are committed to protecting your rights and your personal information.