Privacy Policy for Customers of Hackney Florist

Name: ALL OF ME
Brand: Hackney Florist
Price: 100.00 GBP
Availability: InStock

Introduction

This Privacy Policy sets out how Hackney Florist collects, uses, stores, and safeguards your personal information when you place an order with us. The details below apply to all customers placing orders with Hackney Florist from Hackney and the surrounding districts. We are committed to protecting your privacy and handling your personal data transparently and in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws.

What Data We Collect

When you place an order with Hackney Florist, we collect personal data necessary to process your request and fulfil your order. The types of data we collect include:

Identity Data: Your full name and (optionally) the recipient's name.
Contact Data: Your billing address, delivery address, and contact details such as telephone number.
Transaction Data: Records of the products you order, purchase date, payment status, and order number.
Payment Data: Payment information such as card details or other transaction data, processed securely via our payment providers. We do not store card details on our servers.
Communication Data: Any correspondence or feedback you provide, such as requests, order notes, and queries.
Technical Data: IP address, device type, browser type, and access times, collected through our website for analytics and fraud prevention purposes.

Lawful Basis for Processing Data

We process your personal data on the following lawful grounds as defined by the GDPR:

Contractual Necessity: Most of the data we collect is necessary for fulfilling your order or responding to service requests; without it, we would not be able to complete the transaction.
Legal Obligation: Certain processing activities are required by law, such as record-keeping for tax purposes.
Legitimate Interests: We may process your data to conduct necessary business operations, improve our services, or protect our business from fraud, provided these interests are not overridden by your rights and freedoms.
Consent: For certain non-essential uses, such as direct marketing communications, we will ask for your explicit consent, which you can withdraw at any time.

How We Use Your Data

We use your personal information to:

Process and deliver your flower orders, including managing payments and arranging delivery to you or your recipient.
Communicate with you regarding your order status, delivery information, or any customer service issues.
Respond to your queries, requests, or feedback.
Improve our website, services, and customer experience through analysis and feedback.
Comply with applicable legal and regulatory obligations.
Detect and prevent fraud, abuse, and unlawful activity on our platform.

How Long We Keep Your Data

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain order and transaction data for up to seven years after your last transaction to comply with UK tax law and business accounting obligations. Communication and support-related data is retained for up to two years from the date of your last contact with us, unless a longer retention period is required by law or necessary for establishing or defending legal claims.

Processors and Data Sharing

We may share your personal data with trusted third party service providers to enable us to operate our business and deliver your orders. These third parties (“Processors”) act on our instructions and are bound by contractual obligations to safeguard your information. They include:

Payment Providers: To process your order payment safely and securely.
Delivery Partners: To enable the fulfilment and delivery of your flower orders to your chosen address.
IT & Hosting Providers: For website hosting, backup, and technical support.
Professional Advisors: Such as accountants or legal consultants, where necessary.

We do not sell your personal data to third parties. Personal data may be accessed, processed, or stored outside the UK or European Economic Area (EEA) by our processors (such as web hosting or payment processors) but only where adequate data protection measures are in place.

Your Rights Under GDPR

You are entitled to a range of rights under the GDPR in connection with your personal data. These include:

Right of Access: You may request details of the personal data we hold about you.
Right to Rectification: To correct inaccurate or incomplete data we hold about you.
Right to Erasure: To request deletion of your personal information under certain circumstances.
Right to Restrict Processing: If you want us to suspend processing of your data in specific situations.
Right to Data Portability: To receive your data in a structured, commonly-used machine-readable format and have it transferred to another provider, where technically feasible and appropriate.
Right to Object: To object to processing of your information where we rely on legitimate interests.
Right to Withdraw Consent: Where we process data based on consent, you may withdraw your consent at any time.
Right to Lodge a Complaint: You have the right to make a complaint to the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

To exercise any of your GDPR rights, you may contact us using the contact details provided on our website.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to ensure it reflects current legal requirements and our data processing practices. Updates will be posted on our website and, where appropriate, you will be notified of significant changes.

Contacting Us

If you have any questions or concerns about this Privacy Policy or our handling of your personal data, please refer to the contact section on our website for our up-to-date details.