Fitzrovia Florist Privacy Policy

Introduction

This Privacy Policy outlines how Fitzrovia Florist collects, uses, protects, and stores personal data. It applies to all customers placing orders with Fitzrovia Florist from Fitzrovia and the surrounding districts. As a business established in the United Kingdom, we are committed to safeguarding your personal data in line with the requirements of the General Data Protection Regulation (GDPR).

What Data We Collect

When you interact with Fitzrovia Florist, whether online, by phone, or in person, we collect various types of personal data as necessary to fulfill your order and provide our services. The data categories include:

  • Identity Information: Name, salutation, and contact details.
  • Contact Information: Email address, delivery address, telephone number.
  • Order Details: Product selections, special requests, card messages, recipient name and address.
  • Payment Information: Card payment details (processed securely via third-party payment providers; we do not store full card information).
  • Communication Records: Details of communications with our team, including enquiries, feedback, and complaints.
  • Technical Data: IP address, device details, and browsing activity where you use our website (captured via cookies and analytics tools).

Lawful Basis for Processing

Under GDPR, we may only process your personal data when we have a lawful basis. Fitzrovia Florist relies on the following:

  • Contractual Necessity: To process orders, deliver products, or provide quotations and customer service at your request.
  • Legal Obligation: To fulfill legal requirements for accounting, taxation, or regulatory compliance.
  • Legitimate Interests: To improve our services, manage our business, respond to feedback, and prevent fraud. We always balance our legitimate interests against your rights and freedoms.
  • Consent: Where we require your permission to send marketing communications, we ask for your explicit consent, which you may withdraw at any time.

How We Use Your Data

Personal data collected by Fitzrovia Florist is used for the following purposes:

  • Processing and fulfilling customer orders.
  • Confirming orders, providing delivery updates, and communicating relevant information regarding your purchase.
  • Responding to queries, customer service requests, and complaints.
  • Sending marketing communications (only when you have opted in).
  • Improving our products, website, and customer experience.
  • Meeting our legal obligations relating to recordkeeping and taxation.

Data Processors and Third Parties

In certain circumstances, we may share your personal data with trusted third parties known as data processors. These include:

  • Payment Service Providers: To securely process transactions on our behalf.
  • Delivery Partners: To ensure timely delivery of orders to your designated recipient.
  • IT Service Providers: For web hosting, data storage, and technology support.
  • Professional Advisors: Such as accountants or legal counsel, when necessary for our business operations and compliance.

All processors are selected carefully and subject to contractual obligations to protect your data and only use it for specified purposes. We do not sell your personal data to third parties, and we require all partners to comply with applicable data protection regulations.

Data Retention

Fitzrovia Florist retains your personal data only as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically, order-related information is retained for up to six years following your transaction to comply with financial and legal obligations. After this retention period, data will be securely deleted or anonymised, unless we are required by law to keep it for a longer period.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of any incomplete or inaccurate information.
  • Right to Erasure: You may request the deletion of your data where there is no lawful basis to continue processing it.
  • Right to Restrict Processing: You may ask us to restrict our use of your data in certain circumstances.
  • Right to Data Portability: Where applicable, you may request the transfer of your data to another provider in a readable format.
  • Right to Object: You may object to the processing of your data for direct marketing or when processed under legitimate interest.
  • Right to Withdraw Consent: Where we rely on your consent, you may withdraw consent at any time for future processing.

If you wish to exercise any of these rights, please contact us using the details on our website. We will respond within one month of receipt of your request, subject to any legal requirements and exemptions.

Security of Your Data

We take the security of your personal data seriously. Fitzrovia Florist implements appropriate technical and organisational measures to safeguard your data from unauthorised access, alteration, disclosure, or destruction. Our systems are regularly reviewed, and employees and processors are trained in data protection best practices.

International Transfers

We do not routinely transfer personal data outside the United Kingdom or European Economic Area. If in future it becomes necessary for your data to be transferred internationally, we will ensure suitable safeguards are in place to protect your rights and ensure the security of your data in accordance with GDPR requirements.

Changes to This Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our business processes or applicable legal requirements. The most current version will always be available on our website, and significant changes will be communicated to customers as appropriate.

Contact and Complaints

If you have any questions regarding this Privacy Policy, how your data is handled, or wish to make a complaint, please contact us using the methods detailed on our website or speak to a staff member in store. If you believe your data protection rights have not been upheld, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).