Florist Hook Privacy Policy

Introduction

This Privacy Policy sets out how Florist Hook collects, processes, and protects your personal information when you place orders with us in Hook and surrounding districts. We are committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws. This policy details the types of data we collect, our lawful basis for processing, how long we keep your information, our use of third-party processors, and your rights as a customer.

Scope of This Policy

This Privacy Policy applies to all individuals and entities who place orders with Florist Hook in Hook and the surrounding areas. By using our services, you agree to the practices described herein. The policy covers data collected through our website, phone orders, and any other methods of communication with Florist Hook.

What Data We Collect

We collect the following types of personal data when you place an order or interact with our services:

• Contact Information: Such as your name, delivery address, phone number, and, where applicable, the recipient’s name and address.
• Order Details: Including product selections, delivery instructions, and gift card messages.
• Payment Information: While we process payments securely, we do not store full debit or credit card details after processing the transaction. All sensitive payment information is handled by trusted third-party payment processors.
• Communication Records: Records of your communications with us, including order queries, complaints, or feedback.
• Technical Data: Such as IP address, browser type, and usage data when you visit our website, collected through cookies or similar technologies.

Lawful Basis for Processing Personal Data

Florist Hook processes your personal data on the following lawful bases, as defined under GDPR:

• Performance of a Contract: Data is processed to fulfil your orders and deliver products as requested.
• Legal Obligation: We process certain data to comply with accounting, tax, and other legal requirements.
• Legitimate Interests: To improve our services, address enquiries, prevent fraud, and manage and maintain our business operations, provided these interests are not overridden by your rights and interests.
• Consent: Where you have provided explicit consent (for example, to receive marketing communications), you can withdraw this consent at any time.

How We Use Your Information

Your personal data is used strictly for the purposes outlined below:

• To process and deliver your orders, including arranging delivery and communicating updates.
• To provide customer support and respond to your queries or complaints.
• To manage our financial records and comply with legal obligations.
• To improve our website, products, and customer service by analysing usage data (anonymously where possible).
• With your consent, to send marketing information (such as special offers or new products) that may interest you. You may opt out of receiving marketing at any time.

Data Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected, meet our contractual and legal obligations, or defend potential claims. Typically, order-related data is kept for a period in line with legal accounting and tax requirements (usually up to 7 years), after which it will be securely deleted or anonymised. If you have given consent for marketing communications, we will retain your contact details until you withdraw your consent or unsubscribe.

Data Processors and Third Parties

Florist Hook engages reputable third-party processors to deliver certain services, such as payment gateways, courier or delivery services, website hosting and analytics providers. These processors are only provided with the information necessary to perform their respective services and are contractually required to safeguard your data in accordance with the GDPR.

We do not sell or share your personal information with third parties for their marketing purposes. Any sharing of your data occurs strictly for delivering your order or complying with legal obligations.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include secure storage systems, restricted access protocols, and the use of encrypted communication where appropriate. We also require any third parties handling your data to implement similar security measures.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct or update any inaccurate or incomplete data we hold.
• Right to Erasure: In some circumstances, you can request that we erase your personal data from our records.
• Right to Restrict Processing: You may request that we limit how we use your data in certain situations.
• Right to Data Portability: You have the right to receive your information in a structured, commonly used format and to transfer it to another data controller where technically feasible.
• Right to Object: You can object to our processing of your personal data in certain cases, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, or if you have questions about our data processing practices, please contact us using the contact details provided on our website.

Changes to This Policy

Florist Hook may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated clearly on our website and will apply from the date of publication.

Contact and Further Information

If you have any concerns or wish to make a complaint regarding how we handle your personal data, you may contact us using the information available on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection supervisory authority.