Cockfosters Florist Privacy Policy

Our Commitment to Your Privacy

At Cockfosters Florist, safeguarding your personal data is a core priority. This Privacy Policy explains how we collect, use, store, and protect your personal information when you place orders with us. It also details your rights under the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Cockfosters Florist from Cockfosters and the surrounding districts.

Personal Data We Collect

When you interact with Cockfosters Florist, we may gather the following types of personal data:

• Identity Information: Name, billing address, and delivery address.
• Contact Information: Phone number and postal address.
• Order Details: Flower selection, special instructions, purchase history, and requested delivery dates.
• Recipient Information: Name, delivery address, and contact number for the individual receiving the flowers.
• Payment Information: Payment card details handled securely by payment processors (Cockfosters Florist does not store card numbers).
• Communication Records: Records of your communications with us, such as inquiries, feedback, or complaints.
• Technical Data: IP address and device/browser information collected automatically when you use our website.

Lawful Basis for Processing Data

Under GDPR, we must have a lawful basis to process your personal data. Cockfosters Florist uses your information for the following purposes, on these legal grounds:

• Contractual Necessity: To process and deliver your orders, create invoices, and communicate order updates, we process data to fulfill our contract with you.
• Legitimate Interests: We may process data to enhance our services, prevent fraud, manage queries or complaints, and improve our website functionality. We always balance these interests with your privacy rights.
• Legal Obligations: Some information is processed to comply with applicable laws (such as record-keeping for tax purposes or crime prevention).
• Consent: Where required, such as for marketing communications, we process your data only if you have given clear consent, which you can withdraw at any time.

Data Retention: How Long We Keep Your Information

Cockfosters Florist retains your personal data only as long as necessary to fulfill the purposes described above, including any legal, accounting, or reporting requirements. Typically, we keep order-related data for up to seven years to comply with our legal obligations and to handle any future queries or complaints. Non-essential data used for marketing purposes will be kept only with active consent, and you may request its deletion at any time. When data is no longer required, it is securely deleted or anonymized.

Third-Party Processors

To operate efficiently, we work with trusted third-party service providers ("processors") who may process personal data on our behalf. These include:

• Payment processors for handling secure transactions.
• IT support providers managing our website and related infrastructure.
• Delivery partners to facilitate the delivery of your orders.

All processors are required by contract to process your data only as instructed by Cockfosters Florist and to implement appropriate measures to ensure its security. We do not sell or share your personal data for third-party marketing or unrelated purposes.

Your Rights Under GDPR

As a customer, you have important rights regarding your personal data under GDPR, including:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data when it is no longer necessary for the purposes collected, or where you have withdrawn consent.
• Right to Restrict Processing: Request that we limit how we use your data under certain conditions.
• Right to Data Portability: Receive a copy of your data in a machine-readable format or transfer it to another provider.
• Right to Object: Oppose processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where you have provided consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You may complain to a data protection authority if you believe your rights have been infringed.

To exercise any of your rights, please contact us using the details provided on our website or postal address. We will respond to all legitimate requests promptly and, in any case, within one month.

Data Security

Cockfosters Florist implements appropriate security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These include secure servers, restricted access, data encryption in transit, and staff training. However, no system is entirely immune from potential risks. We encourage you to contact us immediately if you suspect any data breach or misuse relating to your personal information.

International Data Transfers

Your personal data is stored and processed within the United Kingdom or the European Economic Area (EEA) wherever possible. If we need to transfer data outside these regions, we ensure that appropriate safeguards are in place, as required by GDPR, such as relying on standard contractual clauses or equivalent protective measures.

Policy Updates

We review and update this Privacy Policy as needed to reflect evolving legal requirements or changes to our services. The most recent version applies to all customers placing orders with Cockfosters Florist from Cockfosters and the surrounding districts.

Contacting Us

If you have any concerns, questions, or wish to exercise your data protection rights, please contact us using the details provided on our website or our business postal address. Your trust is important to us, and we are committed to resolving any concerns promptly and transparently.