Privacy and Data Protection at Harrow on the Hill Florist

Introduction

This Privacy Policy explains how Harrow on the Hill Florist collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. This policy applies to all customers who place orders with Harrow on the Hill Florist, including residents of Harrow on the Hill and the surrounding districts.

What Data We Collect

When you interact with Harrow on the Hill Florist, we may collect and process various types of personal data depending on the nature of your interaction. The categories of data we typically collect include:

• Identity Data: Your name, and in some cases, the name of the recipient of your order.
• Contact Data: Delivery address, billing address, telephone number, and in some cases, email address for order confirmation and updates.
• Order Details: Products purchased, special delivery instructions, and any personal messages to accompany an order.
• Payment Data: Partial payment card details (we do not store full card details; these are processed securely via compliant third-party payment processors).
• Correspondence: Any information you provide when communicating with us, whether via our website, by phone, or in person.
• Technical Data: Information related to the use of our website, such as IP address, browser type, and browsing activities (collected via cookies, where applicable).

Lawful Basis for Processing Data

Harrow on the Hill Florist processes your personal data only when there is a lawful ground to do so. The bases on which we process data include:

• Contractual Necessity: To fulfil orders, process payments, deliver products, and provide customer support.
• Legal Obligations: To comply with legal and regulatory requirements, such as tax and accounting obligations.
• Legitimate Interests: For business administration, to improve our services, and to communicate with customers regarding order status and feedback. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where you have provided explicit consent, for example, when signing up to receive marketing communications. You may withdraw your consent at any time.

How We Use Your Data

We use your personal data to provide our goods and services as efficiently and securely as possible. Common uses of your information include:

• Processing and delivering your orders.
• Contacting you regarding your order or to resolve issues.
• Managing payments and refunds.
• Addressing customer queries or complaints.
• Improving and enhancing our services and user experience.
• Fulfilling legal, regulatory, or tax obligations.

Data Retention

Harrow on the Hill Florist only retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our typical retention periods are as follows:

• Order and transaction information: Retained for seven years to comply with accounting and tax regulations.
• Customer correspondence: Retained for up to two years after your last interaction with us, unless otherwise required by law.
• Marketing data: Retained until you withdraw your consent or request erasure.

Once the relevant retention period has expired, your data will be securely deleted or anonymised.

Data Processors and Sharing

To provide our services, we may share your personal data with trusted third-party service providers (processors) who support our operations. These may include:

• Payment processing companies for secure transaction handling.
• Courier and delivery partners to ensure your flowers reach their destination.
• IT and web hosting companies that enable us to manage our website and communications.
• Professional advisers, such as accountants and legal advisers, where necessary for compliance and business operations.

All third parties are required to respect the security of your personal data and act only on our instructions. We do not allow our processors to use your data for their own purposes. Your data will never be sold or shared with third parties for unrelated marketing.

Data Security

We have put in place physical, technical, and administrative security measures to safeguard your personal data from accidental loss, theft, alteration, or unauthorised access. These include restricted access to systems, secure payment gateways, and staff data protection training.

Your Rights as a Customer

Under the GDPR and applicable UK data protection laws, you have a number of rights regarding your personal data, including:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If any data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: You may request the deletion of your personal data where there is no lawful reason for us to continue processing it.
• Right to Restrict Processing: You can request the restriction or suppression of your personal data in certain circumstances.
• Right to Object: You have the right to object to our processing of your personal data where we rely on legitimate interests or direct marketing.
• Right to Data Portability: You may request that we transfer your data to another service provider, where technically feasible.

If you wish to exercise any of these rights, please contact us via our contact page or in person at our shop. There may be specific legal exceptions or requirements that may apply to your request.

Changes to this Policy

Harrow on the Hill Florist may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The latest version will always be available in-store and on our website. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact and Further Information

If you have any questions about this Privacy Policy, your data, or how we handle your information, please get in touch via our website contact page or by visiting our shop. We are committed to respecting your privacy and will address your queries as promptly as possible.