Chalk Farm Florist Customer Privacy Policy

Privacy Policy for Chalk Farm Florist Customers

This Privacy Policy sets out how Chalk Farm Florist (“we”, “our”, or “us”) collects, stores, processes, and protects your personal data when you place flower orders from Chalk Farm and the surrounding districts. We are committed to respecting your privacy and ensuring your data is handled in accordance with the General Data Protection Regulation (GDPR). This policy explains what information we collect, why we collect it, how long we keep it, who processes it, and your rights regarding your data.

Scope of the Privacy Policy

This Privacy Policy applies to all individuals placing orders with Chalk Farm Florist, whether online, by phone, or in person, across Chalk Farm and neighbouring districts. By placing an order with us, you acknowledge the practices described here.

Information We Collect

To process your orders and provide the best possible service, we collect the following categories of personal data:

• Identity Data: Your full name.
• Contact Data: Delivery address, billing address, and telephone number.
• Email Data: Your email address, so we can confirm your order and provide updates.
• Payment Data: Partial payment details, such as method and transaction references (Note: All payment transactions are securely processed by third-party providers; we do not store full card information).
• Order Data: Order contents, recipient details (if applicable), card messages, and special instructions.
• Technical Data: For online customers, we may collect information about your IP address, device, and browsing activity (see ‘Cookies and Website Data’ below).

Lawful Basis for Processing

We process your personal data in compliance with the GDPR and rely on the following lawful bases:

• Contractual Necessity: To process your order, deliver products, and communicate about your purchase.
• Legal Obligation: To comply with legal requirements such as tax and accounting obligations.
• Legitimate Interests: For business operations, service improvement, and customer support, provided these interests do not override your rights.
• Consent: Where applicable, for marketing communications or optional cookie use. You may withdraw consent at any time.

How We Use Your Data

We use your data for the following primary purposes:

• Processing and fulfilling your order, including delivery to a recipient if specified.
• Communicating confirmations, receipts, and delivery updates.
• Handling customer service requests and inquiries.
• Improving our products and services based on feedback and usage trends.
• Complying with legal and regulatory obligations.
• For legitimate business analytics, while safeguarding your privacy.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above and to comply with our legal requirements. Generally, we keep your order and contact data for up to seven years following your last transaction to meet tax, accounting, and legal record-keeping obligations. Marketing preferences are kept until you unsubscribe or request deletion. Anonymised data and aggregated information that cannot identify individuals may be retained for statistical purposes.

Third-Party Processors

To provide our services efficiently, we partner with trusted third-party processors who handle data on our behalf. These may include:

• Payment service providers (for secure payments).
• IT and web hosting companies (to maintain website and order systems).
• Delivery partners (to deliver your orders).
• Accountants or legal professionals (for compliance and advice).

All processors are required to uphold GDPR standards, guarantee the security and confidentiality of your data, and use it only as instructed by us.

Data Security

We implement suitable security measures to protect your data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Access to your data is restricted to only those employees and processors with a genuine business need. Although we work hard to protect your personal information, no method of transmission or storage is completely secure. We continuously review and enhance our protection measures.

Cookies and Website Data

Our website may use cookies and similar technologies to enhance your browsing experience, remember preferences, and gather analytic data. Essential cookies are necessary for website functionality. Optional cookies (such as those for analytics or marketing) will only be set with your consent. You can adjust your cookie preferences using your browser settings at any time.

Your Data Protection Rights

Under the GDPR, you have specific rights regarding your personal data. These include:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no overriding legal reason for retention.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive a copy of your data in a structured format or request its transfer to another provider.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Complain: Lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.

Children’s Privacy

We do not knowingly collect information from children under the age of 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Material changes will be highlighted in updated versions of this policy. We encourage you to review this Privacy Policy regularly.

Contacting Us

If you have any questions or wish to exercise your data protection rights, you may contact us using the information provided on our website, in-store, or on your order confirmation. We are committed to promptly addressing your concerns and assisting you in protecting your privacy.