Our Commitment to Your Privacy at Barnet Florists

Privacy Policy for Barnet Florists Customers

This Privacy Policy explains how Barnet Florists collects, uses, retains, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Barnet Florists from Barnet and surrounding districts. We are committed to respecting your privacy and safeguarding your information throughout all stages of our floral services.

1. What Data We Collect

When you place an order with Barnet Florists—whether in person, by phone, or online—we collect and process certain personal data. The information we may collect includes:

• Contact details: such as your name, address, telephone number, and delivery address details.
• Order details: including items purchased, delivery instructions, and messages for flower cards.
• Payment information: such as card details (processed securely through our payment provider) and billing address, but we do not store your payment details after the transaction is complete.
• Correspondence: records of communication for customer service or complaint resolutions.

We will never collect more data than necessary. We do not knowingly collect data from children under the age of 16.

2. Lawful Basis for Data Processing

Under GDPR, we ensure every use of your personal data is supported by a clear lawful basis, including:

• Contractual necessity: To process and deliver your orders, we must use your contact and order information to perform our contract with you.
• Legal obligation: We may use and retain your details as required by law, such as for tax or accounting purposes.
• Legitimate interests: To improve our services, manage customer relations, and handle queries or complaints, where they do not override your rights and interests.
• Consent: If we wish to use your data for direct marketing or promotional purposes, we will request your explicit consent and provide you the right to withdraw it at any time.

3. How We Use Your Data

Your data is used strictly for the purposes specified below:

• Processing and fulfilling your flower orders
• Arranging delivery as per your instructions
• Contacting you about your order, or where additional information or clarification is needed
• Handling after-sales care, such as managing complaints or processing refunds
• Complying with legal and regulatory requirements
• If applicable, sending you marketing materials with your explicit consent

4. Data Retention

Barnet Florists retains your personal data only for as long as necessary to fulfill the purposes outlined above or to comply with legal obligations. Typically, this means:

• Orders and contact records are kept for up to 7 years from the transaction date for tax and accounting compliance.
• If you consented to marketing communications, your contact details will be retained until you withdraw your consent.
• Payment information is never stored by Barnet Florists beyond the completion of a transaction.

Upon expiry of the retention period, your data will be securely deleted or anonymised.

5. Data Processors and Third Parties

We work with carefully selected third-party service providers ("processors") to help deliver our services. These may include:

• Payment processors for secure handling of payments
• Delivery services to fulfil floral deliveries
• IT service providers who assist with order processing and data storage

Each processor is required by contract to protect and handle your data securely and in compliance with GDPR. We do not sell or share your personal data with third parties, except as necessary for the above purposes or as required by law.

6. International Data Transfers

Your personal data is stored and processed within the United Kingdom and/or the European Economic Area (EEA). We do not transfer your data outside the EEA. If ever required, strict safeguards would be applied in line with GDPR requirements.

7. Data Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Access to your data is strictly limited to staff and service providers who need it to process your order.

8. Your Rights Under the GDPR

You have several rights in relation to your personal data under GDPR, including:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your data where there is no longer a legitimate reason for its use.
• Restriction: The right to request restriction of processing in certain circumstances.
• Objection: The right to object to processing based on legitimate interests or direct marketing.
• Data portability: The right to receive your data in a structured, commonly used format and request its transfer to another controller.
• Withdrawal of consent: Where we rely on your consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the details provided at our shop or on your order confirmation. We aim to respond to your requests within 30 days.

9. Policy Updates

This privacy policy may be updated occasionally to reflect changes to our processing practices or regulatory requirements. We will provide notice of material changes where appropriate.

10. Contact and Complaints

If you have concerns about how we use your personal data or wish to make a complaint, you can contact us in writing at our Barnet shop address. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

Thank you for trusting Barnet Florists with your order. We are dedicated to respecting your privacy and protecting your information.