Northwood Florist Privacy Policy

Privacy Policy for Northwood Florist Customers

This Privacy Policy describes how Northwood Florist collects, uses, and protects your personal data when you place an order with us. The policy is designed to comply with the General Data Protection Regulation (GDPR) and applies to all customers placing orders for delivery in Northwood and the surrounding districts. We value your trust, and safeguarding your rights and personal information is of utmost importance to our business.

Data We Collect

When you place an order with Northwood Florist, either online, over the phone, or in person, we may collect and process the following types of personal data:

• Contact Information: Name, delivery address, billing address, telephone number, and email address.
• Order Details: Purchase history, flower selections, card messages, and order preferences.
• Payment Information: Card payment details (note: these are processed securely through a payment processor and are not stored by Northwood Florist), and payment status information.
• Correspondence: Communication records, including emails or notes taken over calls regarding your order.
• Website Usage Data: Information about how you use our website, such as pages viewed and interaction patterns, collected via cookies or analytics tools (does not include personal identification unless you choose to provide it as part of your order).

Lawful Basis for Data Collection and Processing

Northwood Florist only collects and processes your personal data where we have a valid lawful basis for doing so, as required by the GDPR. Our main lawful bases for processing customer data are:

• Contract: We process your data to fulfil your order and provide our flower delivery services, which forms a contract between you and Northwood Florist.
• Legitimate Interest: We may process your data to improve our services, to respond to your queries, or to retain records for business administration, provided these interests do not override your rights and freedoms.
• Legal Obligation: We may process personal data when required to comply with applicable legal or regulatory obligations, such as financial record keeping.
• Consent: Where required, such as for marketing communications, we will request your explicit consent before using your data for this purpose. You may withdraw consent at any time.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. In general:

• Order records and associated customer data are retained for up to seven years to comply with taxation and legal business obligations.
• Correspondence and feedback may be kept for up to two years for customer service purposes.
• Non-essential data, such as website analytics (where not connected to an identified individual), may be retained for a shorter period as required for business analysis.

When data is no longer required, we securely erase or anonymise it.

Processors and Data Sharing

In certain circumstances, Northwood Florist works with third-party service providers or data processors to facilitate business operations and customer orders. When we share data, we do so only to the extent necessary, and all third parties are required to adhere to GDPR standards and ensure data security. Common categories of data processors include:

• Payment Service Providers: To securely process your payment transactions.
• Delivery Partners or Couriers: To deliver your floral orders to the intended recipients in Northwood and surrounding districts.
• IT Service Providers: For the secure hosting and maintenance of our website or business systems.
• Professional Advisors: Such as accountants or legal advisors if required for compliance or business management.

Northwood Florist does not sell or trade customer personal data to third parties. Data is only shared as strictly necessary for business operations and in line with GDPR requirements.

Your Rights Under GDPR

As a Northwood Florist customer, you have several important rights under the General Data Protection Regulation with regard to your personal data:

• Access: You have the right to request access to personal data we hold about you.
• Rectification: You can ask us to correct or complete your personal data if it is inaccurate or incomplete.
• Erasure: You can request deletion of your personal data when it is no longer necessary for the purpose collected or if you withdraw consent (where applicable), subject to legal obligations.
• Restriction: You can request that we restrict processing of your data in certain contexts.
• Data Portability: Where technically feasible, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Objection: You may object to processing of your data for direct marketing or other legitimate interests in certain circumstances.
• Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

If you wish to exercise these rights, please contact us using the details provided on our website or by visiting our shop in Northwood. We will respond to requests in accordance with GDPR timeframes and, where legally required, may ask for proof of identity to ensure your data is secure.

How We Protect Your Data

Northwood Florist is committed to ensuring the security of your personal information. We implement appropriate technical and organisational measures, including secure servers, restricted access, and staff training, to protect against unauthorised access, alteration, disclosure, or destruction of your personal data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legislation or in our data processing practices. Please check this page periodically for the latest information. The current version will always be available at our premises and on our website.

Policy Scope and Contact

This Privacy Policy applies to all customers placing orders with Northwood Florist, whether for delivery in Northwood or any of the surrounding districts. For any questions, further information, or specific requests regarding your data, please contact us as detailed on our official website or in person at our Northwood branch. We are committed to addressing privacy concerns and to providing assistance or clarification as needed.