Barnsbury Flowers Privacy Policy

Our Commitment to Your Privacy

Barnsbury Flowers is dedicated to protecting the privacy and security of our customers' personal information. We comply with the UK General Data Protection Regulation (GDPR) and relevant data protection legislation. This Privacy Policy explains how we collect, use, store, and process your personal data when you place an order with us, whether for local delivery or pick-up within Barnsbury or surrounding districts.

Scope of This Policy

This Privacy Policy applies to all customers placing orders with Barnsbury Flowers for delivery or collection in Barnsbury and adjacent areas. By ordering from us, you acknowledge and agree to the terms set out in this policy.

What Data We Collect

When you interact with Barnsbury Flowers, we may collect the following categories of personal data to fulfil your order and provide our services:

• Contact information: Full name, delivery address, and contact details.
• Order details: Information about your flower selections, occasion, messages for recipients, or special requests.
• Payment information: Transaction details (such as payment method and confirmation) but not full card numbers or security codes; these are handled securely by our payment processor.
• Correspondence: Any communications between you and Barnsbury Flowers, including order confirmations, feedback, and queries.
• Technical data: IP address, device type, and other technical details that may be collected if you place an order via our website.

The Lawful Basis for Handling Your Data

Under GDPR, we are required to identify the lawful bases upon which we process your personal data. The main grounds for processing your information are:

• Contractual necessity: We collect and process your data to fulfil your flower order, provide delivery, manage payment, and communicate regarding your purchase.
• Legal obligations: In some cases, we must retain certain information to comply with tax, accounting, or regulatory requirements.
• Legitimate interests: We may process your data for the continuous improvement of our services, to prevent fraud, and to ensure our business operates efficiently and securely. If we do so, we always consider your rights and interests as a customer.
• Consent: Where applicable, for example, if you opt-in to receive marketing from us, we will rely on your consent, which you can withdraw at any time.

How We Use Your Information

We use your information to:

• Process and deliver your flower orders, including customisations or personal messages.
• Provide customer service and handle inquiries or complaints.
• Send order confirmations and delivery updates.
• Comply with legal and financial record-keeping obligations.
• Improve our products and customer experience (using aggregated, anonymised data when appropriate).

Data Retention: How Long We Keep Your Information

We hold your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for satisfying legal, accounting, or reporting requirements. Typically, we retain order and transaction details for up to 7 years to comply with accounting and tax regulations. Data relating to marketing communications is retained unless you opt-out or request erasure.

Sharing and Use of Data Processors

Barnsbury Flowers may share your data with trusted third parties who act as data processors to support our business functions, including:

• Payment services providers for secure transaction processing.
• Delivery partners who help fulfil and deliver your orders within Barnsbury and nearby districts.
• IT and system providers who support our website and data management systems.

All data processors are required to meet strict data protection and security standards, and data is never sold to or shared with external parties for unrelated purposes. We do not transfer your personal data outside the UK/EEA unless adequate protections are in place.

Your Rights Under GDPR

The GDPR affords you important rights regarding your personal data. You are entitled to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Have incorrect or incomplete data corrected.
• Erasure (Right to be Forgotten): Have your data erased under certain circumstances, for example, if it is no longer needed.
• Restriction: Limit or suppress processing of your data in specific situations.
• Data Portability: Obtain your data in a commonly used format if required.
• Objection: Object to specific uses of your data, including direct marketing.
• Withdraw Consent: Where processing is based on consent, you may withdraw this at any time.

To exercise your rights, please contact us using the methods outlined on our website or written correspondence.

Data Security

We are committed to safeguarding your personal data. Barnsbury Flowers maintains appropriate technical and organisational measures to protect your information against accidental loss, destruction, unauthorised access, or disclosure. This includes secure web forms, encrypted payment methods, and strict access controls.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates take effect immediately upon publication. We encourage you to periodically review this policy to stay informed of how we are protecting your data.

Contact and Complaints

If you have any questions, concerns, or wish to exercise your rights regarding your personal data with Barnsbury Flowers, please use the contact methods provided on our official website or through postal communication. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection authority.

Last Updated

This version of the Barnsbury Flowers Privacy Policy was last updated in June 2024.