Tufnell Park Florist Privacy Policy for Customers

Introduction

This Privacy Policy explains how Tufnell Park Florist collects, uses, stores, and safeguards your personal data when you place orders with us, whether via our website, telephone, or in-store. The policy is written in accordance with the General Data Protection Regulation (GDPR) and applies to all customers placing orders from Tufnell Park and surrounding districts.

What Personal Data We Collect

When you interact with Tufnell Park Florist, we collect personal information to fulfil your order and provide our services effectively. We may collect the following categories of data:

• Contact Information: Such as your full name, delivery address, billing address, and contact details (e.g., phone number).
• Order Details: Information about the products you order, special instructions, and delivery details, including recipient information if applicable.
• Payment Information: Payment card details or transaction confirmation from your chosen payment provider. (Note: We do not store full payment card details; these are processed directly through our payment processor.)
• Communication: Records of your correspondence with us, including queries, compliments, or complaints.
• Website Usage Data: Technical information such as IP address, browser type, and pages visited, collected through cookies or similar technologies (where consented).

Lawful Basis for Processing Your Data

Tufnell Park Florist processes your personal data on the following lawful bases under GDPR:

• Contractual Necessity: To process and fulfil your orders, deliver products, and communicate order updates.
• Legal Obligation: To comply with applicable financial, tax, and consumer laws.
• Legitimate Interests: To maintain customer records, improve our products and services, and ensure security.
• Consent: Where required, such as for sending marketing communications or using non-essential cookies.

How We Use Your Personal Data

The personal data collected is used strictly for the following purposes:

• Processing and delivering your flower orders, including communicating with you or the recipient for successful delivery.
• Handling payments and refunds related to your transactions.
• Resolving customer service issues or complaints.
• Meeting legal and tax obligations.
• Sending service-related notifications (e.g., order confirmations, delivery updates).
• (With your consent) Providing offers, news, or promotions relevant to Tufnell Park Florist.

Data Retention Policy

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying legal, accounting, or reporting requirements. The retention periods vary depending on the type of information:

• Order and Transaction Records: Retained for up to 7 years to comply with tax and accounting regulations.
• Contact and Delivery Information: Kept as long as necessary to deliver orders and resolve post-delivery queries, then deleted or anonymised unless you have an ongoing customer account.
• Marketing Data: Maintained until you withdraw your consent or unsubscribe.
• Technical Data: Retained according to our cookie management practices and for website security or analytic purposes.

Data Processors and Security

We use trusted third-party service providers (data processors) to support essential functions, such as payment processing, IT hosting, and delivery services. These processors are selected for their GDPR-compliant practices and may include:

• Payment gateways that securely process your transactions without giving us access to full card details.
• IT support providers who help maintain our systems and website.
• Delivery partners carrying out local deliveries on our behalf.

All processors are required under contract to protect your data and process it only on our instructions. Access within Tufnell Park Florist is restricted to authorised staff who require it to perform their duties. We also utilise appropriate technical and organisational measures to safeguard your data from unauthorised access, loss, or misuse.

Your Rights Under GDPR

You have various rights under the GDPR relating to your personal data:

• Right to Access: You can request a copy of your personal data held by us.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You can ask for your personal data to be deleted when it is no longer necessary or consent is withdrawn (except where we must retain it for legal reasons).
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Restriction: You can request restriction of processing in certain circumstances.
• Right to Data Portability: You may request your data in a structured, commonly used format for transfer elsewhere.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time, without affecting any processing undertaken before that withdrawal.

To exercise your rights, please contact us using the contact methods provided on our website or in-store. We may ask for proof of identity before dealing with your request and aim to respond within one calendar month.

Policy Updates and Scope

This Privacy Policy may be updated periodically to reflect changes in the law or our data processing practices. We encourage you to review this policy whenever you place an order. This document applies to all customers placing orders with Tufnell Park Florist from Tufnell Park and neighbouring districts.

Contact and Further Information

If you have any questions regarding this Privacy Policy or how your data is handled, please reach out to us using the contact details published on our official website or available in-store. We are committed to handling your data transparently, securely, and in compliance with applicable regulations.