Florist Enfield Town Privacy Policy

Introduction

This Privacy Policy explains how Florist Enfield Town collects, uses, protects, and retains your personal information when you place orders with us from Enfield Town and the surrounding districts. We are committed to respecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and all relevant UK data protection laws. Please read this policy carefully to understand how your data is handled and your associated rights.

Scope of Policy

This Privacy Policy applies to all individuals who place orders with Florist Enfield Town, whether online or by telephone, within Enfield Town and neighbouring areas. By ordering from us, you acknowledge and agree to the practices described in this policy.

What Personal Data We Collect

When you place an order or interact with Florist Enfield Town, we may collect the following categories of personal data:

• Identification data: Your full name.
• Contact details: Delivery address, billing address, and telephone number.
• Order details: Product choices, order notes (such as messages for recipients), and order value.
• Payment information: Payment transaction details (note: card details are processed in compliance with security standards and are not stored by Florist Enfield Town).
• Recipient data: Name, address, and any contact information for individuals to whom you request delivery.
• Communications: Any correspondence between you and Florist Enfield Town (e.g., order queries, delivery instructions).
• Technical data: IP address, browser type, and cookies, where applicable.

Lawful Bases for Processing

Florist Enfield Town processes your personal data only when there is a lawful basis as defined under GDPR. These include:

• Contractual Necessity: To perform our contract with you, by processing and delivering your orders as requested.
• Legitimate Interests: To optimize our service quality, prevent fraud, manage customer queries, and improve our website and ordering process.
• Legal Obligations: To comply with UK and EU legal requirements, such as tax and accounting regulations.
• Consent: For any optional marketing communications or non-essential cookies, we only process your data if you have provided clear consent. You can withdraw this consent at any time.

How We Use Personal Data

Your personal data is used for the following purposes:

• Processing and fulfilling your floral orders.
• Arranging deliveries to recipients specified by you.
• Providing you with customer support and responding to your enquiries.
• Meeting statutory and regulatory obligations.
• Improving our products, services, and website experience.

Data Sharing and Processors

To fulfil your orders and deliver our services, we may share your data with carefully selected third parties (data processors) who operate under contractual obligations to keep your information secure and confidential. Such processors may include:

• Payment processing companies: To process your payments securely.
• Delivery and courier partners: To fulfill floral deliveries on our behalf in Enfield Town and neighbouring areas.
• IT and website service providers: For operational support, maintenance, and hosting of our systems.
• Accountants or legal advisors: Where required for compliance with accounting and legal obligations.

We do not sell or rent your personal data to third parties. If we need to transfer any of your information outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place as required by GDPR.

Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law (for example, for tax and accounting purposes). Typically, customer order records and supporting data are kept for up to six years following your most recent transaction with us. After this period, your information will be securely deleted or anonymized, unless a longer retention period is required or permitted by law.

Data Security

Florist Enfield Town employs physical, electronic, and procedural safeguards to protect your information against accidental loss, misuse, unauthorized access, disclosure, alteration, or destruction. Where we engage third-party processors, we ensure their data security measures meet GDPR requirements.

Your Rights

Under the GDPR, you have the following rights regarding your personal information held by Florist Enfield Town:

• Right of Access: You can request confirmation as to whether we process your personal data and obtain a copy of your data.
• Right to Rectification: You can ask for your personal information to be corrected if inaccurate or incomplete.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data, for example while a correction is being made.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format, to transfer to another service provider.
• Right to Object: You can object to the processing of your data in certain cases, for example, for direct marketing.
• Rights in relation to Automated Decision Making: We do not use your personal data for automated decision-making or profiling.

If you wish to exercise any of these rights, please contact us. We may require proof of identity to process your request. We aim to respond to all legitimate requests within one month.

Children’s Privacy

Our services are not intended for use by children under 16 years of age. We do not knowingly collect or process personal data relating to children.

Changes to This Privacy Policy

Florist Enfield Town may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The latest version will always be available upon request and on our website. You are encouraged to review this policy periodically to stay informed of how we protect your information.

How to Contact Us or Lodge a Complaint

If you have any questions about this Privacy Policy, the data we hold about you, or if you wish to raise a complaint about how your personal data has been handled, you may contact us. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).