GDPR Privacy Policy for Flower Delivery Orders

Introduction

This Privacy Policy explains how Flower Delivery Colliers Wood (‘we’, ‘us’, ‘our’) handles personal data of customers placing flower delivery orders in Colliers Wood and the surrounding districts. We are committed to ensuring the security and protection of the personal information we process, and to providing a compliant and consistent approach to data protection, in accordance with the General Data Protection Regulation (GDPR).

Who This Policy Applies To

This policy applies to all individuals who place or arrange flower delivery orders through Flower Delivery Colliers Wood for addresses located in Colliers Wood and its nearby areas. By using our services, you acknowledge and agree to the use of your data as described in this policy.

What Personal Data We Collect

In the course of providing our flower delivery services, we may collect and process the following types of personal data:

• Contact Information: Your name, recipient’s name, delivery address, billing address, contact telephone numbers, and any other relevant contact details.
• Order Details: Information about the products you order, delivery instructions, occasion messages, and preferences.
• Payment Information: Details required to process payments, such as card type and the last four digits of your card. Payment data is handled securely via third-party payment processors and is not stored by us.
• Communication Records: Any correspondence with our customer service, feedback, and requests.
• Technical Information: If you interact with our website, we may collect your IP address, browser type, and usage statistics for security and analytics.

Lawful Basis for Processing

We process your personal information on the following legal bases, as required under the GDPR:

• Performance of a Contract: Processing is necessary to fulfil your order and provide the agreed flower delivery services.
• Legal Obligation: Processing may be necessary to comply with relevant laws, such as accounting, tax, or fraud prevention.
• Legitimate Interests: We may process your data for the purposes of improving our services, customer support, or security, provided your rights and interests do not override these legitimate interests.
• Consent: Where required by law, or for specific types of communications (such as marketing, where consent is needed), we will ask for your explicit permission.

How We Use Your Personal Data

The personal data collected is used for the following purposes:

• Processing and fulfilling your flower delivery orders
• Communicating order updates and delivery confirmations
• Responding to customer queries and complaints
• Improving our products and customer service
• Complying with our legal and regulatory obligations
• Internal record keeping and administration

Data Retention

Your personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Typically, basic account, order and transaction data will be retained for a period of up to seven years after your last transaction, to comply with legal and financial record-keeping obligations. Data no longer required will be securely deleted or anonymised.

Data Processors and Sharing

We may share your data with trusted third-party service providers (‘data processors’) only when necessary for delivery or payment processing. Our primary categories of processors include:

• Payment Processors: Securely handle transaction payments on our behalf.
• Delivery Services and Couriers: Responsible for delivering your orders to the specified address.
• IT and Hosting Providers: Manage website and data storage infrastructure.

All third-party processors are required to comply with GDPR and to safeguard your data to at least the same standard as we do. Your data will never be sold or shared for unrelated third-party marketing purposes.

Your Rights under GDPR

As a data subject, you have specific rights concerning your personal data under the GDPR. These include:

• Right to Access: Request a copy of any personal information we hold about you.
• Right to Rectification: Request correction or updates to your personal data if it is inaccurate or incomplete.
• Right to Erasure (‘Right to be Forgotten’): Request that we delete your personal information under certain circumstances.
• Right to Restrict Processing: Request that we suspend the processing of your personal data.
• Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
• Right to Object: Object to our processing of your personal data where our legal basis is legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw it at any time without affecting prior processing.

If you wish to exercise any of these rights, please contact us. You also have the right to complain to a data protection supervisory authority if you feel your data protection rights have not been appropriately upheld.

Data Security

We put in place reasonable and appropriate security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. This includes physical, electronic, and managerial procedures to safeguard and secure the information we collect online and offline.

International Transfers

In general, your data will be processed and stored within the United Kingdom or the European Economic Area (EEA). If there is a need to transfer your personal information outside of these regions, we will take the necessary steps to ensure that such transfers comply with applicable data protection laws, including using Standard Contractual Clauses or ensuring adequacy decisions are in place.

Changes to This Policy

From time to time, we may update this Privacy Policy in response to changes in the law, technology, or our business operations. Any material changes will be clearly communicated on our website or upon your next interaction with us. We encourage you to review this policy regularly to stay informed of how we protect your information.

Contact and Further Information

If you have any questions about this Privacy Policy, your data, or how we handle your information, please get in touch via our usual customer service channels. We are committed to responding to your requests and safeguarding your personal data as required by GDPR.