Harrow Flowers Privacy Policy

Introduction

This Privacy Policy outlines how Harrow Flowers collects, uses, stores, and protects personal data of customers placing orders from Harrow and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal information is handled in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Scope and Applicability

This policy applies to all customers who place orders with Harrow Flowers, whether online, over the phone, or in-store, and who reside in Harrow and neighboring areas. By using our services, you acknowledge and agree to the terms described herein.

What Data We Collect

To process your orders and provide our floral products and services, we may collect the following categories of personal data:

• Contact Information: Full name, email address, telephone number, and address (including delivery address details).
• Order Details: Details of your orders, including product selection, delivery preferences, gift messages, and any special instructions.
• Payment Information: Payment card details and billing addresses, processed securely through third-party payment gateways.
• Communication Records: Correspondence by phone, in person, or through other messaging services regarding your order or queries.
• Technical Data: Browser type, IP address, and device information when you use our website, for security and analytical purposes.

Lawful Basis for Processing

Harrow Flowers processes your personal data based on the following lawful grounds as specified by the GDPR:

• Consent: Where you provide explicit consent, for example, by opting to receive marketing communications.
• Contractual Necessity: Processing necessary to fulfill our contract with you, such as processing orders, deliveries, and payments.
• Legal Obligations: To comply with legal and regulatory requirements applicable to our business.
• Legitimate Interests: Where it is in our legitimate interest to provide and improve our services, maintain security, and communicate with customers, provided those interests do not override your rights and freedoms.

Purposes for Data Use

Your personal information is used strictly as necessary for the following purposes:

• Processing and fulfilling your floral orders, including deliveries and order confirmations.
• Handling payments and payment verification securely.
• Providing customer service, responding to your inquiries, and resolving complaints or issues.
• Sending you important communications about your orders or changes to our services or policies.
• Conducting internal record keeping, data analysis, and service improvements.
• Where applicable, sending you marketing or promotional messages, subject to your consent.

Data Processors and Disclosure

In the course of providing our services, we may share your personal data with trusted third-party processors who perform services on our behalf, including:

• Payment gateway providers for processing card transactions securely.
• Delivery and courier partners to fulfill your order.
• IT and cloud service providers hosting our website and storing data securely.
• Professional service providers (such as accountants or auditors) as required for business operations.

All third-party processors are strictly required to process your data only as instructed by Harrow Flowers and in compliance with data protection legislation. We do not sell, trade, or rent your personal information to any third parties for marketing purposes. Where necessary, we may disclose your information to authorities if required to comply with legal obligations.

Data Retention

Your personal data will not be kept longer than necessary for the purposes it was collected. Generally, we retain order and customer records for up to seven years to comply with legal and tax requirements. Payment card information is handled exclusively by secure third-party processors and not retained by Harrow Flowers. Non-essential data, such as marketing preferences, will be reviewed periodically and retained only as long as valid consent subsists or until you opt out.

Data Security

We employ appropriate technical and organizational measures to protect your personal data from unauthorised access, loss, misuse, disclosure, or modification. Measures include: encrypted payment processing, secure data storage, access controls, and regular security audits. However, please be aware that no data transmission over the internet is entirely secure; therefore, we cannot guarantee the absolute security of data transmitted via our website or other channels.

Your Rights under GDPR

As a data subject, you have specific rights under the GDPR regarding the personal data Harrow Flowers processes about you:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no lawful reason for its continued processing.
• Right to Restriction: Request restriction of processing under certain circumstances.
• Right to Data Portability: Request transfer of your data to another service provider in a structured, commonly used format.
• Right to Object: Object to our processing of your data where we rely on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided in our customer correspondence or instore. We will respond to your request as promptly as possible and always within the timeframes required by law.

Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can promptly delete such information.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The revised policy will take effect upon posting. We encourage customers to review this page regularly to stay informed about how we protect your personal data.

Contact and Queries

If you have any questions or concerns regarding this Privacy Policy or how your data is handled by Harrow Flowers, please reach out to us through the contact methods made available in our customer communications or in-store materials. We are committed to resolving any concerns swiftly and transparently.