Florist Hatch End GDPR Privacy Policy
  Our Commitment to Your Privacy
At Florist Hatch End, we understand the importance of protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you place an order with us. It applies to all customers ordering from Florist Hatch End in Hatch End and surrounding districts.
Personal Data We Collect
When you interact with Florist Hatch End, we may collect and process the following categories of personal data:
  - Contact Information: Your name, address, phone number, and, if applicable, delivery address and recipient contact details.
- Order Information: Details about your floral order, such as products, messages for cards, delivery instructions, and any preferences you provide.
- Payment Details: Necessary payment information such as transaction references. Please note we do not store your full card details, as these are processed securely by authorized payment processors.
- Communication Data: Any correspondence you send us, including requests, feedback, or questions via our website or customer service channels.
- Technical Information: Information about your visits to our website (such as IP address, browser type, and device details), collected via cookies or similar technologies, to help us enhance your shopping experience and ensure site security.
Legal Basis for Processing Your Data
Florist Hatch End processes your personal data lawfully, fairly, and transparently. We use your data on the following legal grounds:
  - Contractual Necessity: Processing is required to fulfill your order, provide the products and services you requested, and communicate with you regarding purchases or deliveries.
- Legal Obligations: We may need to process your data to comply with relevant laws, regulations, and tax obligations.
- Legitimate Interests: We may use your information to improve our products and services, prevent fraud, respond to inquiries, and ensure the safety and functionality of our website, provided these interests are not overridden by your rights.
- Consent: Where required, such as for direct marketing communications, we will seek your clear and explicit consent. You can withdraw consent at any time.
How We Use Your Personal Information
The main purposes for which we use your personal data include:
  - Processing and fulfilling your orders, including delivery to you or to your chosen recipient.
- Providing customer support and responding to your queries.
- Sending you updates about your order or service changes.
- Improving our website, services, and user experience.
- Complying with laws, regulations, and our internal policies.
- Conducting analysis to help improve our business operations (e.g., understanding purchasing trends in Hatch End and surrounding districts).
- Marketing our products and services to you, if you have given your consent.
Retention of Your Data
We retain your personal data only for as long as necessary for the purposes for which it was collected, such as completing your order, maintaining accurate records for tax and accounting, resolving disputes, and complying with legal obligations. Typically, we hold customer data for up to six years following your last transaction unless a longer retention period is required or permitted by law. After this period, data will be securely deleted or anonymized.
Use of Data Processors
To operate our services efficiently, Florist Hatch End may use trusted third-party processors for functions such as payment processing, delivering orders, IT hosting, website analytics, and customer relationship management. These partners are carefully selected and contractually bound to process your data solely for the specified purposes, in line with this policy and according to GDPR requirements. We ensure all processors implement adequate data protection and security measures.
Protecting Your Information
We are committed to securing your personal data. We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, accidental loss, destruction, or disclosure. This includes secure servers, restricted access, staff training, and regular policy reviews. However, no method of internet transmission or electronic storage is completely secure, but we take reasonable steps to protect your data in accordance with GDPR.
Your Rights Under GDPR
As a customer using Florist Hatch End’s services in Hatch End or nearby districts, you have the following rights regarding your personal data:
  - Right to Access: You can request confirmation of whether we are processing your data and obtain a copy of your personal data.
- Right to Rectification: You can ask us to correct or update inaccurate or incomplete personal information.
- Right to Erasure: You can request the deletion of your personal data where there is no longer a legal reason for us to keep it.
- Right to Restrict Processing: You may request that we limit the use of your personal data in certain circumstances.
- Right to Data Portability: Where applicable, you have the right to receive your data in a structured, commonly used format and have it transmitted to another controller.
- Right to Object: You can object to processing where we rely on legitimate interests, and to direct marketing at any time.
- Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.
- Right to Lodge a Complaint: If you believe your rights have been infringed, you have the right to lodge a complaint with a supervisory authority.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Significant changes will be communicated clearly. Please review this policy before placing new orders or submitting personal information to stay informed about how we protect your data.
Contact and Further Information
If you have questions about this Privacy Policy or wish to exercise any of your GDPR rights, please contact us via the methods provided on our website. We are committed to responding promptly and assisting you with any privacy-related concerns.