St John's Wood Florist Privacy Policy

Introduction

This Privacy Policy outlines how St John's Wood Florist collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (GDPR). It applies to all customers who place orders with St John's Wood Florist from St John's Wood and nearby districts. We are committed to respecting your privacy and safeguarding your personal data at every stage of your interaction with us.

What Personal Data We Collect

When you interact with St John's Wood Florist—whether by placing an order, making an enquiry, or signing up for updates—we may collect the following categories of personal data:

Contact Information: This includes your name, delivery address, billing address, email address, and phone number.
Order Details: Information about the products you purchase, recipients' names and addresses, and any gift messages you provide.
Payment Information: Relevant details for processing your payment. Note that we do not store full card numbers; payment processing is conducted by secure third-party providers.
Communication History: Records of your correspondence with us, such as email or written feedback.
Technical and Usage Data: Limited data about your device, IP address, and how you navigate our website, collected through cookies and analytics tools (where applicable and in compliance with consent rules).

Lawful Basis for Processing Personal Data

We only use your personal data when permitted by law and for the specific purposes outlined below. The lawful bases under the GDPR on which we rely include:

Contractual Necessity: To process and deliver your orders, and to communicate with you about your purchases.
Legal Obligations: To comply with legal requirements, such as accounting, tax obligations, or fraud prevention.
Legitimate Interests: For purposes such as improving our services, managing customer relationships, and maintaining the security of our operations, provided that these are not overridden by your data protection rights.
Consent: Where required, such as for marketing communications, we will seek your explicit consent before processing your data for these purposes. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is collected and used for the following purposes:

Processing orders, payment, and delivery of floral products.
Contacting you regarding your order status or enquiries.
Improving the quality of our services and website experience.
Complying with applicable laws and regulations.
Providing updates or information, with your consent, about St John's Wood Florist offers or news.

Sharing and Data Processors

We may need to share your personal data with selected third-party data processors in order to fulfil our contractual obligations and improve our services. Our key categories of processors include:

Payment Service Providers: To securely process your payments. These providers deal directly with transactions and handle your payment credentials using robust security measures.
Delivery Partners: To ensure prompt and accurate delivery of your orders.
IT and System Support Providers: These organisations help us to manage, maintain, and secure our website and digital platforms.
Professional Advisors: For legal, accounting, or regulatory advice if required.

All third-party processors act only on our instructions, and we require them to respect the security of your data and treat it in accordance with the law. We do not sell or trade your personal data to external organisations for marketing purposes.

Data Retention

Your personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, customer order records are held for a period of 6 years to adhere to tax and contractual obligations. After this period, your data is securely deleted or anonymised unless we need to retain it for legitimate business purposes or if required by law.

Your Rights Under GDPR

The UK GDPR grants you specific legal rights regarding your personal data. These include:

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any erroneous or incomplete information.
Right to Erasure: You may request deletion of your data in certain circumstances, for example, if it is no longer necessary for us to retain it.
Right to Restrict Processing: You can request limitation of the use of your data in specific instances.
Right to Data Portability: Where applicable, you can ask to receive your personal data in a format that can be transferred to another service provider.
Right to Object: You may object to certain types of data processing, such as direct marketing.
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

Should you wish to exercise any of these rights, please contact us using the details available on our website or in-store. We will respond to all legitimate requests within one month.

How We Protect Your Data

We implement appropriate technical and organisational security measures to protect your data against accidental loss, unauthorised access, alteration, or disclosure. These include secure data storage, restricted access to personal data, and regular data security reviews. All staff and contractors are trained in data privacy obligations.

International Transfers

As a local business, we generally process your data within the United Kingdom. In case it is ever necessary to transfer data outside the UK or European Economic Area, we will ensure equivalent safeguards are in place as required by the GDPR before doing so.

Updates to This Policy

We may update this Privacy Policy occasionally in line with legal requirements or business changes. Any updates will be effective immediately upon posting. Please check this page periodically to stay informed about how we protect your data.

Contact & Concerns

If you have any questions about our approach to privacy or wish to raise a concern about our handling of your personal data, you can contact us through the channels given on our website or at our store. Additionally, you have the right to raise a complaint with the Information Commissioner's Office (ICO) if you are not satisfied with our response to your data protection queries.

This policy applies to all customers ordering with St John's Wood Florist from St John's Wood and the surrounding districts.