Bloomsbury Florist Privacy Policy

Introduction

This Privacy Policy describes how Bloomsbury Florist collects, processes, stores, and protects personal data of customers who place orders with us in Bloomsbury and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) to ensure your privacy is respected and your data is handled securely and lawfully.

Scope of this Policy

This policy applies to all individuals who place orders for our products and services, whether through our physical store, telephone, website, or any other channel provided by Bloomsbury Florist within Bloomsbury and nearby areas. By placing an order or interacting with us, you acknowledge the terms of this Privacy Policy.

What Data We Collect

To fulfil your order and provide our services, we may collect and process the following types of personal data:

  • Personal Identification Data: Name, address, contact telephone number.
  • Recipient Information: Name, delivery address, contact information (if different from customer’s).
  • Order Details: Product choices, messages for greetings cards, delivery instructions.
  • Payment Data: Transaction information (processed through secure payment providers; we do not store card numbers).
  • Communication Data: Correspondence with us, whether by email, phone, or forms on our website.
  • Technical Data: IP address, browser type, access times, referring URLs (if ordering online).

The Lawful Basis for Processing Your Data

Bloomsbury Florist processes your data under the following GDPR lawful bases:

  • Performance of a Contract: Most of our processing is necessary to provide the service you have requested (e.g., to deliver flowers or gifts to you or a recipient of your choice).
  • Legitimate Interests: We may use your data to improve our services, prevent fraud, and for certain marketing activities (with your consent where required).
  • Legal Obligations: We may retain transaction records to comply with accounting, tax, or regulatory obligations.
  • Consent: Where you have opted into marketing communications, we rely on your explicit consent and you can withdraw it at any time.

How We Use Your Data

Your personal data is used for the following purposes:

  • To process and deliver your order, including confirming purchases and arranging deliveries.
  • To communicate with you regarding your orders or services you have requested.
  • To respond to your enquiries and requests for information.
  • If you have consented, to send you relevant marketing or promotional messages about our products and services.
  • To improve and secure our website, prevent fraud, and comply with our legal obligations.

Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Customer order records are retained for up to 7 years, in line with accounting and legal obligations.
  • Marketing information is retained until you withdraw your consent or unsubscribe.
  • Website analytics data is retained for a maximum of 24 months before being deleted or anonymised.

After these periods, your data is securely deleted or anonymised.

Data Sharing and Processors

We do not sell or rent your personal data to third parties. Your information may be shared with trusted third-party processors, strictly for the purpose of providing our services or fulfilling legal requirements, including:

  • Payment service providers for secure transaction processing.
  • Delivery and courier companies to facilitate the delivery of your order.
  • IT service providers who maintain our databases and website.
  • Professional advisers, such as accountants or legal consultants, as required for compliance.
  • Authorities or regulators, if required by law.

All external processors are contractually bound by confidentiality and data protection agreements and only process your data according to our instructions and GDPR obligations.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include restricted access controls, encryption and secure storage solutions for both physical and digital records.

Your Rights

Under the GDPR, you have the following rights in relation to your personal data held by Bloomsbury Florist:

  • The right of access: You can request a copy of your personal data and information about how it is used.
  • The right to rectification: You can request correction of any inaccurate or incomplete data.
  • The right to erasure ("the right to be forgotten"): You can ask us to delete your personal data in certain circumstances.
  • The right to restrict processing: You can request that we temporarily or permanently stop processing your data.
  • The right to data portability: You can request a copy of your data in a structured electronic format or request us to transfer it to another provider.
  • The right to object: You can object to certain types of processing, including direct marketing.

If you wish to exercise any of these rights, please contact us via the methods set out in our store or on our official website. We may need to verify your identity to process your request and will respond within one month, in accordance with GDPR requirements.

Updates to this Policy

We may review and update this policy from time to time to reflect changes in our practices or for legal and regulatory reasons. If we make significant changes, we will inform you the next time you interact with us or place an order.

Contacting Bloomsbury Florist

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us using the details provided in our store or via our official website. We are committed to resolving complaints in a fair and timely manner.

Conclusion

Your trust and confidence are important to us. Bloomsbury Florist is committed to ensuring that your privacy is protected in accordance with GDPR and best industry practices when you order from us in Bloomsbury and the surrounding districts.