Colney Hatch Flowers Privacy Policy

Overview of Our Commitment to Privacy

At Colney Hatch Flowers, your privacy is of paramount importance. This Privacy Policy explains how we collect, use, retain, and safeguard your personal data. It applies to all customers who place orders with Colney Hatch Flowers from Colney Hatch and surrounding districts. Our practices comply with the General Data Protection Regulation (GDPR) and applicable UK data protection law.

What Personal Data We Collect

When you place an order or interact with Colney Hatch Flowers, we may collect the following types of personal data:

  • Contact Information: Your name, address (including delivery address, if different), and contact details.
  • Order Details: Information about the products or services you order, including any preferences, messages on cards, and delivery instructions.
  • Payment Data: Transaction details (note: payment card details are not stored by us, but processed securely by our payment processors).
  • Communication Records: Any correspondence you have with us, including inquiries and feedback.
  • Technical Information: Data such as IP address, browser type, and device information may be collected when you access our website for security and optimisation purposes.

Lawful Basis for Processing Your Data

Colney Hatch Flowers processes personal data in accordance with Article 6 of the GDPR. The lawful bases we rely on are:

  • Contractual Necessity: To fulfill and deliver your order, contact you regarding your purchase, and provide requested services.
  • Legitimate Interests: For business operations such as record keeping, responding to queries, and ensuring the security and improvement of our services.
  • Legal Obligations: Compliance with relevant laws and regulations, such as taxation and accounting requirements.
  • Consent: When we wish to send marketing communications to you, we will seek your explicit consent, which you may withdraw at any time.

How We Use Your Information

We use your data to:

  • Process and deliver your flower orders and services requested;
  • Communicate with you regarding your order, including confirmations and updates;
  • Improve our products, services, and customer experience;
  • Comply with statutory obligations;
  • Respond to your inquiries or complaints;
  • Carry out internal administrative functions, including auditing and data analysis.

How Long We Retain Your Data

Your personal data is retained only for as long as necessary for the purposes described in this policy. Typically, we will keep order and related personal information for up to seven years to fulfill legal, accounting, and tax requirements or to resolve disputes. Non-essential data and data for which you withdraw consent will be deleted in accordance with our retention schedule. Technical data is retained for security and analytics purposes, generally for a shorter period.

Data Processors and Third Parties

Colney Hatch Flowers engages trusted third-party service providers for certain business operations:

  • Payment Processors: Securely handle payment transactions and do not grant us access to your full payment details.
  • Delivery Partners: Manage the delivery of your orders using relevant contact and address information.
  • IT and Hosting Providers: Support our website and maintain secure data storage and communication channels.
  • Accountancy and Legal Advisors: For compliance with legal obligations.

All data processors are contractually required to handle your information securely and only for specified purposes. We do not sell or trade your data. Data may be processed outside the UK only if adequate safeguards are in place.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data held by Colney Hatch Flowers:

  • The right to access: You can request a copy of your personal data and related information we hold about you.
  • The right to rectification: You can ask to correct any inaccurate or incomplete data.
  • The right to erasure: Also known as ‘the right to be forgotten’—you can request deletion of your data, subject to legal obligations.
  • The right to restrict processing: You can request limited use of your data under certain circumstances.
  • The right to object: You may object to the processing of your data based on legitimate interests or direct marketing.
  • The right to data portability: You can request transfer of your data to you or another provider in a structured, commonly used format.
  • The right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
  • The right to lodge a complaint: You have the right to complain to the UK’s Information Commissioner’s Office (ICO) if you believe your data is not being handled lawfully.

To exercise any of these rights, please contact us via the communication methods provided on our website or in your correspondence with us.

How We Protect Your Personal Data

We use a combination of technical and organisational measures to safeguard your personal information against unauthorised access, alteration, disclosure, or loss. Measures include secure servers, encryption, access controls, physical security procedures, and staff training. We regularly review, update, and test our practices to meet evolving industry standards and regulatory requirements.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect operational, legal, or regulatory changes. The most recent version will always be available on our website. We encourage all customers to periodically review the policy to stay informed about how we protect your information.

Scope and Contact

This policy applies to all Colney Hatch Flowers customers using our services from Colney Hatch and surrounding districts. For any questions or concerns regarding your privacy, please use the contact methods provided on our website. We are committed to upholding your rights and addressing any concerns promptly and transparently.