Lower Clapton Florist Privacy Policy

Our Commitment to Your Privacy

At Lower Clapton Florist, we are dedicated to safeguarding your personal information and maintaining your trust. This Privacy Policy explains how we collect, use, store, and protect your data when you place orders with us from Lower Clapton and the surrounding districts. We adhere strictly to the General Data Protection Regulation (GDPR) and relevant data protection laws. Please read this policy carefully to understand your rights and our obligations regarding your data.

Scope of This Policy

This Privacy Policy applies to all individuals who place orders with Lower Clapton Florist, either directly or via our website, and who reside in Lower Clapton and the surrounding areas. By using our services, you acknowledge and accept the practices described in this notice.

What Data We Collect

When you engage with Lower Clapton Florist, we may collect and process the following types of personal data:

• Personal Contact Information: Your name, address, postcode, telephone number, and any other information you provide when placing an order or making an inquiry.
• Recipient Information: Name, delivery address, message notes, and contact details of recipients for whom you are placing an order.
• Order Details: Product selections, order amounts, delivery dates, and specific instructions related to your purchase.
• Payment Data: Billing address, transaction records, and partial payment card information (note: we do not store full card details; payments are managed via secure third-party processors).
• Communication Data: Records of your communications with us, including queries, complaints, and feedback.
• Technical Data: If you order via our website, we may collect your device IP address, browser type, and cookie information to facilitate service delivery and website functionality.

Lawful Basis for Processing Your Data

In accordance with GDPR, we rely on a range of lawful bases for processing your personal data. These include:

• Contractual Necessity: Processing data as needed to fulfill your flower order or respond to your inquiries.
• Legal Obligation: Retaining certain records as required by UK law (e.g., for accounting or taxation purposes).
• Legitimate Interests: Using your data for our day-to-day business operations, such as improving our services, ensuring security, and preventing fraud. We balance these interests against your rights and freedoms.
• Consent: Where required, we will seek your explicit permission before undertaking activities such as sending marketing communications. You have the right to withdraw consent at any time.

How We Use Your Data

Lower Clapton Florist processes your information for the following purposes:

• To process, confirm, and deliver your flower orders.
• To communicate with you about your purchases or answer your queries.
• To improve our products and services.
• For lawful record-keeping and compliance purposes.
• To prevent or detect unlawful activities such as fraud.
• Subject to your consent, to send you news or offers about our products.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Generally, we keep transaction records and associated data for up to seven years from the date of your purchase, in line with statutory retention obligations. Communication or query correspondence is typically held for a shorter period unless it forms part of our contractual or legal duties.

Data Processors and Third Parties

Where necessary, Lower Clapton Florist may use trusted third-party service providers (data processors) to facilitate our services. These may include:

• Payment processing companies (to manage secure online card transactions).
• IT and hosting service providers (for the operation and security of our website and order management systems).
• Delivery and courier companies (to deliver your order as requested).
• Professional advisors (where required for compliance and legal matters).

All processors are required to handle your data securely, lawfully, and only according to our instructions. We do not sell or rent your personal data to any other third parties. We will not transfer your data outside the UK or European Economic Area without ensuring that appropriate safeguards are in place.

Your Data Protection Rights

Under GDPR and UK data protection law, you have various rights regarding your personal data. These include:

• Right of Access: You have the right to request a copy of your personal data held by us.
• Right to Rectification: If your information is inaccurate or incomplete, you can ask us to correct it.
• Right to Erasure: You can request the deletion of your data under certain conditions, where it is no longer necessary for the purpose it was collected.
• Right to Restriction: You may ask us to limit processing if you contest its accuracy or where processing is unlawful.
• Right to Object: You may object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: In certain situations, you can request a copy of your data in a commonly-used, machine-readable format for transfer to another provider.
• Right to Withdraw Consent: Where consent is the lawful basis for processing, you can withdraw this at any time.

To exercise any of these rights, please contact us using the contact details provided on our website or in-store. We may request proof of identity to ensure your data is protected.

Keeping Your Data Secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure payment technologies, limiting access to personal data, and regular staff training on data protection. In the event of a data breach affecting your information, we will notify you and relevant authorities as required under GDPR.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The latest version will always be available on our website and in our store. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact and Complaints

If you have questions, concerns, or wish to exercise your data rights, please contact us using the details provided via our website or in-store. If you are not satisfied with our response, you may lodge a complaint with the UK Information Commissioner's Office (ICO).