Tottenham Florist Privacy Policy and Data Protection Notice

Privacy Policy Overview

This Privacy Policy describes how Tottenham Florist collects, processes, stores, and protects your personal data. The policy is in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Tottenham Florist, whether you are based in Tottenham or the surrounding districts.

Who We Are

Tottenham Florist is a provider of flower arrangements and related services to customers in Tottenham and neighboring areas. We are committed to safeguarding your privacy and handling your personal data in a secure and transparent manner.

What Personal Data We Collect

When you place an order or engage with our services, we may collect the following types of personal data:

• Contact Information: Your full name, delivery address, billing address, contact telephone number, and other relevant contact details.
• Order Details: Details of your purchase, including items ordered, recipient’s name, recipient’s address, and any messages you ask us to include.
• Payment Information: Information required to process your payment, such as payment card details (processed securely via our payment provider).
• Communication Records: Records of communications you have with us regarding orders, complaints, or queries.
• Website Usage: Technical data such as IP address, browser type, and interaction with our website, gathered via cookies or similar technologies for website functionality and analytics.

Lawful Basis for Processing

We process your personal data under the following lawful bases, as outlined by GDPR:

• Contractual Necessity: To fulfill orders, deliver products and services, and manage transactions.
• Legal Obligation: To comply with legal and financial record-keeping obligations.
• Legitimate Interests: To improve our products and services, handle customer service requests, and undertake analytics to enhance our operations (without overriding your rights and interests).
• Consent: Where required, for optional communications or promotions, which you may opt out of at any time.

How We Use Your Personal Data

Your details are used for the following purposes:

• Processing and fulfilling your order, including arranging delivery and communicating with you about your purchase.
• Responding to your enquiries, requests, or complaints.
• Accounting, auditing, and complying with legal obligations.
• Improving our products, services, and website through internal analysis.
• If opted in, sending occasional information about offers or seasonal promotions (unsubscribe options are always provided).

Data Retention Periods

We retain your personal data only as long as is necessary for the purposes stated above, or as required by applicable laws:

• Order Information: Kept for up to 6 years after your last transaction, in line with legal and tax requirements.
• Marketing Data: If you have consented to receive marketing, your data will be retained until you opt-out or withdraw consent.
• Technical Data: Retained for periods in accordance with our cookie policy and analytics service provider’s policies.

Data Processors and Third Parties

We may need to share your data with selected third-party service providers acting as processors, always on a lawful basis and under strict confidentiality. Categories of these processors include:

• Payment processing companies (for safe and secure payment handling).
• Delivery service providers (to ensure the fulfillment and tracking of your order).
• IT service providers (to support and maintain our website and digital infrastructure).
• Accountancy and professional service providers where legally necessary.

All such processors are strictly bound to use your personal data solely for the services they provide to Tottenham Florist and in compliance with GDPR. Tottenham Florist does not sell your personal data to third parties.

Securing Your Data

We implement appropriate technical and organizational security measures to protect your personal data. These include encrypted connections, secure storage solutions, limited access, and staff training. Despite our best efforts, no security system is entirely impenetrable; therefore, we continuously update our measures to respond to threats and vulnerabilities.

Your GDPR Rights

Under the GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct any personal data that is inaccurate or incomplete.
• Erasure: Request that we delete your personal data in certain circumstances ("right to be forgotten").
• Restriction: Ask us to restrict processing of your data in specific situations.
• Data Portability: Request to receive your personal data in a format that allows you to transfer it to another organization.
• Objection: Object to our processing of your data under legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where we process data on the basis of your consent, you may withdraw this at any time.

To exercise these rights, please contact us using the details provided on our website.

Changes to Our Privacy Policy

We review our privacy policy regularly and update it when necessary to reflect changes in our practices, legal requirements, or services offered. Updated versions are posted on our website with a revised effective date.

Contact and Queries

If you have any questions about this Privacy Policy or your data privacy rights at Tottenham Florist, please refer to the contact information on our website. We will respond to your requests promptly and in accordance with GDPR requirements.