Notting Hill Florist Privacy Policy

Introduction

At Notting Hill Florist, we are committed to protecting and respecting your privacy. This Privacy Policy sets out how we handle your personal information, including data collection, usage, retention, and the rights you have under the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Notting Hill Florist, whether located in Notting Hill or the surrounding districts.

Who We Are

Notting Hill Florist is a local flower shop providing quality floral arrangements and delivery services within Notting Hill and nearby areas. In accordance with the GDPR, Notting Hill Florist acts as the Data Controller for the personal information you provide when placing orders or interacting with us through our services.

What Data We Collect

We collect and process a range of personal information necessary to provide our products and services to you. Depending on your interaction with us, we may collect the following categories of data:

• Identification and contact information: Name, delivery address, billing address, phone number, and email address.
• Order details: Type of flowers/products ordered, delivery instructions, order date, and special messages sent with flowers.
• Payment information: Payment card details (processed securely by third-party payment processors), transaction IDs, and invoicing information.
• Communications data: Messages you send to us via our website or customer support services.
• Website usage data: Information gathered from cookies and similar technologies (such as IP address, browser type, browsing activity on our site), where legally permitted.

Lawful Basis for Processing

Under the GDPR, we must have a valid legal basis for processing your personal data. The lawful bases we rely on include:

• Performance of a contract: Most of the information we collect is necessary to fulfill your order and deliver our products and services to you.
• Legal obligations: We may process some information to comply with legal requirements, e.g., accounting and tax records.
• Legitimate interests: We process certain data to improve our services, prevent fraud, or manage our business operations, provided our interests are not outweighed by your rights or interests.
• Consent: Where appropriate, such as for marketing communications, we will ask for your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used only for legitimate business purposes, including:

• Processing and fulfilling your orders
• Delivering flowers and gifts to your selected recipients
• Handling payment and invoicing
• Providing customer service and responding to enquiries
• Sending service communications about your order status or updates
• Improving our products, website, and customer experience
• Complying with legal or regulatory obligations
• (With your consent) sending promotional materials or newsletters

How Long We Keep Your Data (Retention)

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general:

• Order and transactional data is typically retained for up to seven years to comply with our legal obligations.
• Data used for customer service purposes is retained for as long as necessary to manage requests or resolve issues.
• Marketing data will be kept until you opt out or withdraw your consent.

Once the applicable retention period has expired, your data will be securely deleted or anonymized.

Sharing Data and Data Processors

We do not sell your personal data to third parties. However, we may share your data with selected third-party service providers (data processors) who act on our behalf to support the delivery of our services, for example:

• Payment processors to securely process transactions
• Delivery providers to ensure your flowers arrive at the correct destination
• IT and hosting providers for website and systems management
• Marketing or analytical service providers (only with your consent where necessary)

All processors are contractually bound to protect your data and comply with GDPR requirements. We ensure your personal information is only used according to our instructions and for the purposes described in this policy.

Your data may be stored or processed outside the United Kingdom (UK) or the European Economic Area (EEA). Where this is the case, we take steps to ensure that your data is afforded an appropriate level of protection, for example by using standard contractual clauses approved by the European Commission.

Your Rights

Under the GDPR, you have certain rights in relation to your personal data:

• Right of access: You may request access to the personal data we hold about you.
• Right to rectification: You can request correction of your data if it is inaccurate or incomplete.
• Right to erasure ("right to be forgotten"): You can request deletion of your data under certain circumstances.
• Right to restrict processing: You may ask us to restrict or suppress the processing of your data.
• Right to data portability: You can request transfer of your data to another service provider.
• Right to object: You can object to certain data processing activities, including direct marketing.
• Right to withdraw consent: Where we process your data on the basis of your consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us. We will respond to all requests in accordance with applicable data protection laws.

Children’s Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect or process data from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. The latest version of the policy will always be available on our website. Significant changes will be communicated where we are required to do so.

How to Contact Us

For further details about our privacy practices or to exercise your data protection rights, please get in touch with Notting Hill Florist through the appropriate contact details listed on our website or in correspondence with our business premises.