Hackney Flowers Privacy Policy

Introduction

At Hackney Flowers, we are deeply committed to respecting and protecting your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your data in accordance with the General Data Protection Regulation (GDPR). The policy applies to any customer placing orders with Hackney Flowers from Hackney and the surrounding districts. We encourage you to read this policy carefully to fully understand how your data is handled when you interact with us.

What Data We Collect

When you place an order or interact with Hackney Flowers, we may collect the following types of personal data:

• Identity Data: Such as your full name and, if applicable, recipient's name.
• Contact Data: Including your address, delivery address, and contact details.
• Order Details: Information about the products you order, special requests, and delivery instructions.
• Payment Data: Details of your payment method (e.g., last four digits of your card number), payment status, and transaction history.
• Communication Data: Records of correspondence, feedback, or queries you submit.
• Technical Data: Limited data regarding your device and interaction with our website, such as IP address, browser type, and cookies, if applicable.

Lawful Basis for Processing

Hackney Flowers will only process your personal data where we have a lawful basis to do so under GDPR, generally including:

• Performance of a Contract: To fulfill your floral order and deliver our services as agreed.
• Legal Obligations: To comply with legal requirements, such as accounting or tax records.
• Legitimate Interests: For the efficient management of our business, such as improving our service, provided your rights do not override these interests.
• Consent: Where required, such as subscribing to a newsletter. Consent can be withdrawn at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

• Processing and fulfilling your order, including delivery coordination.
• Communicating with you about your order or responding to queries.
• Internal record keeping and accounting purposes.
• Personalising your experience and improving our products and services.
• Meeting legal requirements and preventing fraud.

Retention of Data

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. The retention period may depend on the nature of your interaction with us and any legal obligations. Typically, order and transaction data is kept for up to seven years to satisfy accounting and tax regulations. Communication and feedback data may be held for a shorter period unless retention is required for dispute resolution or to respond to ongoing queries.

Data Sharing and Processors

Hackney Flowers does not sell or rent your personal information to third parties. However, we may share certain data with trusted third-party processors who perform services on our behalf, including:

• Payment Service Providers: To process your payments securely.
• Delivery Partners: To fulfill and deliver your floral orders efficiently.
• IT and System Providers: For website hosting, data storage, and technical support.

All processors are subject to strict data protection obligations and may only process your data as instructed by Hackney Flowers, in compliance with GDPR.

Your Rights Under GDPR

GDPR provides you with important rights regarding your personal data. Depending on the situation, you may have the following rights:

• Right of Access: Request confirmation of whether we process your data and receive a copy of your information.
• Right to Rectification: Request correction of inaccurate or incomplete data we hold about you.
• Right to Erasure (“Right to be Forgotten”): Ask for your data to be deleted in certain circumstances, such as when it is no longer necessary for the purpose originally collected.
• Right to Restriction: Request restriction of processing while we address any concerns regarding your data.
• Right to Data Portability: Request a copy of your data in a structured, commonly used format for transfer to another provider, if applicable.
• Right to Object: Object to specific types of processing, such as direct marketing.
• Withdrawal of Consent: Where processing is based on consent, you have the right to withdraw it at any time. Doing so will not affect the lawfulness of processing prior to withdrawal.

Please note that some rights may be subject to legal exceptions or may not apply in certain cases (for example, where we are required to retain information for legal reasons).

How We Safeguard Your Data

Hackney Flowers uses appropriate administrative, technical, and physical safeguards to protect your data against loss, theft, or unauthorised access. Access to your personal data is only permitted for employees and processors who have a need to process such data for the purposes stated in this policy and are subject to confidentiality obligations.

International Data Transfers

Your personal data is generally processed within the United Kingdom or the European Economic Area (EEA). If we need to transfer data outside of these regions, we will ensure appropriate safeguards are in place to comply with data protection legislation.

Changes to This Policy

We may update this Privacy Policy as necessary to reflect changes to our practices or legal obligations. If updates are made, we will post the revised policy on our website with a new effective date. We encourage you to review this policy from time to time to stay informed about how we protect your information.

Contacting Hackney Flowers

If you have any questions, requests, or concerns about this Privacy Policy or your data, please contact us using the details provided on our website or in your order confirmation. We are committed to responding promptly and transparently to all inquiries.