Florist Bloomsbury Privacy Policy

Introduction

This Privacy Policy outlines how Florist Bloomsbury manages your personal data when you place orders with us, whether in Bloomsbury or the surrounding districts. We are committed to ensuring your information is handled in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. This policy explains what information we collect, how it is used, the legal basis for processing, data retention periods, our use of data processors, and your rights as a customer.

Scope of This Policy

This policy applies to all individuals placing flower orders with Florist Bloomsbury in Bloomsbury or the neighbouring areas. By using our services, you acknowledge that we collect and process your data as described in this document.

Personal Data We Collect

We collect personal information that is necessary to provide our floral products and services to you. The categories of data we may collect include:

• Identity Data: Name, surname, and, if applicable, title.
• Contact Data: Delivery address, billing address, postcode, mobile or landline phone number, and (where needed) email address.
• Order Details: Purchase history, itemised order contents, preferred delivery time, and recipient details (if you send flowers to someone else).
• Payment Data: Card type, partial payment card number (never full card details), transaction IDs, and billing confirmation from payment providers.
• Communication Data: Records of correspondence (for example, queries about your order or requests related to delivery).
• Marketing Preferences: Whether or not you wish to receive marketing messages or seasonal offers (with your consent).

We do not intentionally collect or process special category data (such as health or biometric data) as part of our standard services.

How We Obtain Your Data

Your personal data is provided directly by you when you place an order (in person, by telephone, or through our website), complete a form, or contact us regarding our services. In some cases, data regarding a delivery recipient (e.g., their name and address) may be provided by you as part of your order.

Lawful Basis for Processing

Florist Bloomsbury only processes your personal data where there is a clear legal basis under the GDPR. These bases include:

• Performance of a Contract: Processing is necessary to fulfil the floral order(s) you place with us, manage delivery, and provide customer service.
• Legal Obligations: Certain data must be retained and processed for reasons such as tax, accounting, and compliance with consumer laws.
• Legitimate Interests: We may process your data for the purposes of service improvement, record keeping, and ensuring the security of our operations, provided these interests are not overridden by your rights.
• Consent: We rely on your consent for optional activities such as sending email newsletters or seasonal offers. You may withdraw your consent at any time.

How We Use Your Data

Your data is used to process orders, arrange deliveries, handle payments, respond to your enquiries, prevent fraud, and, if opted-in, provide you with promotional information. We do not use your data for profiling or automated decision-making.

Data Retention Periods

Your personal data is only kept as long as necessary for the purposes for which it was collected. Typically, we retain order and delivery details for up to six years to comply with accounting and legal requirements, after which your data is securely deleted or fully anonymised. Data used for marketing is retained until you unsubscribe or withdraw consent, whichever comes first.

Data Processors and Sharing

Florist Bloomsbury engages trusted third-party processors to help deliver our services. These may include:

• Payment processing providers, for secure handling of transactions
• Courier or delivery services, to ensure timely delivery of your flowers
• IT support providers, for secure management of our website and systems
• Accounting service providers, strictly for necessary record-keeping

All third-party processors are contractually obliged to adhere to GDPR, only act on our instructions, and not use your data for any purpose except performing services on our behalf. We do not sell or trade your personal data with anyone.

Your data may be shared with public authorities where required by law (for example, law enforcement or regulatory agencies).

Your Rights Under GDPR

Subject to certain conditions, you are entitled to the following rights regarding your personal data:

• Right of Access: Obtain confirmation of whether your data is being processed and access a copy.
• Right of Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data when no longer necessary or if processing was unlawful.
• Right to Restrict Processing: Ask us to restrict processing in certain circumstances, such as during a dispute regarding accuracy.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format for transfer elsewhere.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: At any time, if processing is based on consent.

If you wish to exercise your rights, please contact us through the methods provided on our website or in-store.

Data Security

Florist Bloomsbury takes appropriate physical, technical, and organisational measures to safeguard your personal data. These measures include secure payment systems, regular staff training, restricted data access, and the use of encrypted storage where applicable.

International Transfers

We do not routinely transfer your personal data outside the United Kingdom or European Economic Area (EEA). If such transfers become necessary, we will ensure adequate protection as required by GDPR.

Updates to This Policy

We may periodically review and update this policy to reflect changes in our practices or compliance with legal requirements. The latest version will always be available from our website or in-store. You are encouraged to review this policy periodically for any updates.

Queries and Concerns

If you have any concerns about how your data is handled or wish to make a complaint, please contact us using the contact information provided on our website or visit us in-store. If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.