Your Privacy at Noak Hill Florist
Privacy Policy for Customers in Noak Hill and Surrounding Districts
This Privacy Policy outlines how Noak Hill Florist collects, stores, uses, and protects your personal data when you place orders with us. Our commitment to privacy is guided by the General Data Protection Regulation (GDPR) and applies to all customers in Noak Hill and neighbouring areas who use our services.
What Data We Collect
To provide our services and fulfil your orders, we may collect the following types of personal data:
- Identity Data: This may include your full name and, if placing orders for others, the name of the recipient.
- Contact Data: Address details for delivery, billing address where applicable, and other location-related information.
- Order and Transaction Data: Order details, delivery notes, records of products or services purchased, and transaction history.
- Payment Information: We process limited payment data such as payment method, but do not store complete card details. Payments are processed securely using third-party processors.
- Communication Data: Records of phone calls, correspondence, and communications related to your orders or queries.
- Website Technical Data: When you use our website, we collect data such as IP address, browser type, device information, and cookies (where applicable).
Lawful Basis for Processing Data
Under GDPR, we must have a lawful basis to process your personal data. The main grounds on which we rely include:
- Contractual Necessity: We require your information to accept, process, and deliver your order or services you request.
- Legal Obligation: In specific cases, we must process certain data to comply with requirements such as tax records or fraud prevention.
- Legitimate Interests: For purposes which are reasonably expected as part of running our business (for example, keeping records of past orders, customer service, or service improvements), provided these interests are not overridden by your rights.
- Consent: Where required, we may seek your explicit consent for marketing communications or where otherwise necessary. You may withdraw this consent at any time.
How We Use Your Information
Your data is used exclusively for purposes relevant to your use of our services, including:
- Processing and delivering your flower orders
- Managing payments and refunds
- Communicating with you about your order, queries, or customer support
- Improving our products and services, including website experience
- Fulfilling regulatory and tax obligations
- Detecting and preventing fraud or security risks
How Long We Keep Your Data
We retain your personal data only as long as necessary to fulfil the purposes described in this policy and to meet legal, accounting, or reporting requirements. Typically, order and transaction records are kept for up to seven years in accordance with accounting and tax regulations. Communication records and other relevant correspondence may be kept for up to two years, unless a longer period is legally required or justified by ongoing customer service needs.
Third-Party Data Processors
To provide our services efficiently, we may work with carefully selected third-party service providers (data processors) who handle personal data strictly on our behalf and according to our instructions. Examples include:
- Payment Processors: Securely process credit/debit card payments on our behalf.
- Delivery Partners: Support in delivering orders to your chosen address.
- Website and IT Providers: Manage and maintain our website, hosting, and technical infrastructure.
Where we share data with such processors, we ensure they are committed to GDPR compliance and data security through binding agreements. Your information is not sold or shared for unrelated third-party marketing purposes.
Your Rights
Under the GDPR, you have several important rights in relation to your personal data. These include:
- The right to access: You can request details of the personal data we hold about you.
- The right to rectification: If your data is inaccurate or incomplete, you can request correction.
- The right to erasure ("the right to be forgotten"): Under certain circumstances, you can ask for your data to be deleted.
- The right to restrict processing: You may ask us to restrict or stop processing in specific situations.
- The right to data portability: Where applicable, you can request a copy of your data in a structured format to use elsewhere.
- The right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
- Withdraw consent: Where processing relies on your consent, you can withdraw this at any time.
- The right to complain: You have the right to lodge a complaint with the UK Information Commissioner’s Office or your local data protection authority.
To exercise your rights or to make any enquiries about your personal data, please contact us using the details provided on our website or by visiting us in store.
Data Security
We are committed to protecting your personal data. We implement reasonable security measures and safeguards to prevent loss, misuse, unauthorised access, disclosure, or alteration of your information. Our website uses secure protocols where applicable, and we regularly review our systems for vulnerabilities.
Policy Updates
This Privacy Policy may be updated periodically to reflect changes in legal requirements, best practices, or our business operations. The latest version will be made available on our website and, where appropriate, communicated to customers directly.
Contact and Further Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please refer to the contact information available on our website or visit our shop in Noak Hill. We aim to address all requests promptly and transparently.