Finchley Flowers Privacy Policy: GDPR Compliance for Our Customers

Introduction

At Finchley Flowers, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you place an order with us, whether in-person, by phone, or via our website. This policy applies to all customers placing orders from Finchley and the surrounding districts. Please read this Privacy Policy carefully to understand our practices regarding your information and how we will treat it in strict accordance with the General Data Protection Regulation (GDPR).

What Data We Collect

To fulfill your floral orders and provide quality customer service, Finchley Flowers collects the following categories of personal data:

Contact Information: Your name, address, phone number, and delivery address.
Order Details: Details about the products you purchase, personalized messages, and delivery instructions.
Payment Information: Limited billing and payment details such as card type and transaction amounts. (Please note: full card details are processed securely by our payment processor and are not stored by Finchley Flowers.)
Communications: Records of your correspondence with us, including enquiries, feedback, or complaints.
Website Usage Information: Non-identifiable data such as cookies and browsing activity, where applicable and with your consent.

Our Lawful Basis for Processing

We process your personal information under one or more of the following lawful bases, as set out in the GDPR:

Contractual Obligation: To perform our contract with you and fulfill your orders.
Legal Obligation: To comply with applicable legal and regulatory requirements.
Legitimate Interests: To improve our services, prevent fraud, and ensure the security of our operations, where these interests are not overridden by your rights.
Consent: Where you have provided express consent, such as for marketing communications. You may withdraw this consent at any time.

How We Use Your Data

Finchley Flowers uses your personal data only for the purposes for which it was collected, which may include:

Processing and fulfilling your floral orders, including delivery arrangements.
Responding to your requests, enquiries, or feedback.
Notifying you about changes to your order or our services.
Improving and optimizing our customer experience.
Carrying out administrative and accounting obligations.
Sending you information about our products and offers when you have opted in to receive such communications.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. In general:

Order and transaction information is retained for up to seven years, in alignment with UK financial regulations.
Basic contact details for marketing purposes are retained only while you have an active relationship with us or until you withdraw consent.
After the relevant retention period, your data will be securely deleted or anonymized.

Our Data Processors

To provide our services, Finchley Flowers occasionally shares necessary personal data with trusted third-party service providers. These may include:

Payment processors: To securely process your payments on our behalf.
Delivery partners: For arranging and tracking the fulfillment of your order.
IT and website management providers: Who supply and maintain our business technology infrastructure.
Professional advisers: Such as accountants or legal consultants, where required for compliance.

All data processors are carefully selected and contractually bound to uphold the confidentiality and security of your data, acting only under our instructions and in full compliance with GDPR.

Data Security

We take the protection of your personal information seriously. Appropriate technical and organizational safeguards are in place to prevent unauthorized access, loss, or misuse of your data. These measures include secure servers, restricted access to personal information, encryption technologies, and regular staff training on data handling.

Your Data Protection Rights

Under the GDPR, you have a range of rights over your personal data held by Finchley Flowers:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct or update your personal data if it is incomplete or inaccurate.
Right to Erasure: You can request that we delete your data under certain circumstances.
Right to Restrict Processing: You can request that we restrict how your data is used in certain situations.
Right to Data Portability: You can request that your data be provided to you or transferred to another provider.
Right to Object: You may object to processing of your personal data for direct marketing or where processing is based on legitimate interests.
Right to Withdraw Consent: You can withdraw your consent for data processing at any time, where consent is the basis for processing.

If you wish to exercise any of your data rights or have concerns about how your data is used, please contact us using the contact details provided on our website or in-store. We aim to respond to all requests within one month.

Updates to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Any updates will be published on our website and will apply from the date of publication.

Contact and Further Information

Should you have any questions or require further information about this Privacy Policy, our data practices, or your rights under GDPR, please refer to the contact information available on our website or visit us in-store at Finchley Flowers. We are always happy to assist you with your privacy queries.