Cricklewood Florist Privacy Policy

Introduction

This Privacy Policy sets out how Cricklewood Florist collects, uses, stores, and protects personal data of all customers who place orders with us from Cricklewood and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

What Data Do We Collect?

When you place an order or interact with Cricklewood Florist, we may collect the following categories of data:

• Identity Data: Name, title.
• Contact Data: Address, delivery address, contact phone number.
• Order Details: Date and contents of your order, recipient name and address if different from your own.
• Payment Data: Payment method selected. We do not store credit/debit card details; payments are processed securely by our third-party payment processors.
• Communication Data: Any correspondence or enquiry made by phone, contact form, or in person.
• Technical Data: IP address, browser type, and cookies (if you use our website), collected for functionality and analytics.

Lawful Basis for Processing

Under GDPR, Cricklewood Florist processes your personal data on the following lawful bases:

• Contractual necessity: To fulfil your floral order and to deliver products to you or your recipient.
• Legal obligations: To comply with legal requirements such as tax and accounting.
• Legitimate interests: To improve our products and customer service, and to communicate with you about your order.
• Consent: For optional marketing and promotional communications, where you have expressly agreed.

How We Use Your Data

Cricklewood Florist will use your data for:

• Processing and fulfilling your floral orders
• Communicating order updates or queries
• Responding to customer service enquiries
• Improving our website and services
• Maintaining financial and transaction records as required by law
• Sending marketing materials where you have given consent

Data Retention

Your personal data is retained only as long as necessary for the purpose it was collected. Typically, we retain order details and correspondence for up to 7 years in line with UK tax and accounting regulations. For marketing preferences or other non-transactional information, we retain data until you withdraw your consent or ask for it to be erased. After retention periods have ended, your data will be securely deleted or anonymised.

Data Processors and Third Parties

To provide our services, certain personal data is processed by trusted third-party suppliers who act as our data processors. These include:

• Payment processors: For secure management of online or card payments. No card details are stored by us.
• IT and website providers: For website hosting, order management, and analytics.
• Delivery partners: Where necessary to ensure your flowers reach the correct address.

All data processors act only on our instructions, comply with relevant data protection requirements, and do not use your data for their own purposes.

International Transfers

Your personal data is processed within the UK or European Economic Area. If any transfer outside these areas is required (for example, secure cloud storage), safeguards such as standard contractual clauses will apply to protect your privacy rights.

Security of Your Data

Cricklewood Florist takes the security of your data seriously. We implement appropriate organisational and technical measures to protect your data from unauthorised access, disclosure, alteration, or destruction. Only authorised staff and suppliers have access to your personal information for processing your orders or delivering our services.

Your Rights Under GDPR

You have the following rights regarding your personal data held by Cricklewood Florist:

• Right of access: Request a copy of your personal data we hold.
• Right to rectification: Request corrections to any inaccurate or incomplete information.
• Right to erasure: Request deletion of your data, where legally permitted.
• Right to restrict processing: Ask us to restrict how we use your data in certain circumstances.
• Right to data portability: Request that your data be provided to you or transferred to another provider.
• Right to object: Object to certain types of processing, such as direct marketing.
• Right to withdraw consent: If you have given consent for marketing, you can withdraw it at any time.
• Right to lodge a complaint: Contact the relevant supervisory authority (such as the Information Commissioner’s Office) if you are concerned about how your data is handled.

Policy Applicability

This Privacy Policy applies to all individuals placing orders with Cricklewood Florist from Cricklewood and the neighbouring districts. It covers the collection and use of data via our website, by phone, and in person at our premises. If you use our services outside these areas, similar practices apply but local requirements may govern specific issues.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. The current policy will always be available to you before you provide any personal data or place an order. Please review it periodically to stay informed.

Contact and Questions

If you have any questions about this policy or how your data is processed by Cricklewood Florist, please contact us by using the details available on our official website or by visiting our premises.