Privacy Policy for Flower Delivery Orders in East Sheen

Introduction

This Privacy Policy explains how Flower Delivery East Sheen ("we", "our" or "us") collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This Policy applies to all individuals placing flower delivery orders within East Sheen and surrounding districts, regardless of how the order is placed (via website, telephone, or in person). Our commitment is to ensure that your privacy is respected and your personal information is safe.

What Data We Collect

To process your flower delivery orders and provide the best possible service, we may collect and process the following types of personal data:

• Identity Information: Name, title
• Contact Details: Delivery address, billing address, recipient address (if different), telephone number
• Email Address: For order confirmations and updates
• Order Information: Purchase history, product selections, message to the recipient
• Payment Information: Card payment details (processed securely via a third-party payment provider)
• Device/Usage Information: IP address, browser type, cookies, site usage details (if you place an order through our website, for the purpose of security and improving user experience)

Lawful Basis for Processing Personal Data

Under GDPR, we must have a lawful basis to collect and process your data. These are the grounds we rely on:

• Performance of a Contract: Most data we collect (such as name, address, payment details) is necessary to fulfil your order and deliver the flowers you've purchased.
• Legal Obligation: In certain instances, we are required by law to retain transaction records (for example, for tax and accounting purposes).
• Legitimate Interests: To improve our services, protect against fraud, and keep our website secure, we may need to process minimal additional information. Any such processing is done in a manner that respects your rights and interests.
• Consent: If you opt in to receive marketing communications, we will rely on your clear and explicit consent, which you can withdraw at any time.

How We Use Your Data

We use your personal data only for the purposes for which it was collected, which include:

• Processing and fulfilling your flower delivery orders
• Sending service communications regarding your order
• Providing customer support and responding to enquiries
• Improving our website, products, and services
• Meeting our legal and accounting obligations
• Sending marketing materials (only with your explicit consent)

Retention of Your Data

Your data will be retained only as long as necessary for the purposes stated above. Generally:

• Order and transaction data is kept for up to 7 years, as required by law for accounting and audit purposes.
• If you have signed up for marketing communications, we will retain your contact details until you unsubscribe or withdraw consent.
• Technical and usage data (such as cookies) may be retained for up to 26 months for analytics and website security.

After the relevant retention periods, your personal data will be securely deleted or anonymised.

Data Processors

In order to fulfil orders and operate our business, we work with carefully selected third-party service providers who process data on our behalf. These include:

• Payment processors: For secure transaction handling
• IT and website hosting providers: For reliable hosting and infrastructure
• Delivery partners: For managing the delivery logistics
• Customer service platforms: To support queries and feedback

All such processors are contractually obliged to comply with data protection law and may only process your data as instructed by us. We do not sell or rent your personal data to any third party.

Your Rights Under GDPR

As a customer within East Sheen and its surrounding districts, you have the following rights regarding your personal data:

• Right to Access: You may request access to your personal data held by us.
• Right to Rectification: If your information is incorrect or incomplete, you may request corrections.
• Right to Erasure: Also known as the "right to be forgotten," you may ask for your data to be deleted in certain circumstances.
• Right to Restrict Processing: You can ask us to restrict the processing of your data under specific conditions.
• Right to Object: You may object to our processing of your data based on legitimate interests or direct marketing.
• Right to Data Portability: You can request your data in a structured, machine-readable format for transfer to another provider where technically feasible.
• Right to Withdraw Consent: If you have previously given consent for marketing or specific processing activities, you may withdraw this at any time.

To exercise any of these rights, please contact us using the details provided on our website or in your order confirmation. We may require proof of identity to process your request and respond within one month.

How We Protect Your Data

The protection of your personal data is of utmost importance to us. We use robust technical and organisational safeguards, such as:

• Secure website and payment encryption (SSL)
• Regular security training and awareness for staff
• Access controls and data minimisation
• Regular monitoring and auditing of our systems

Despite these measures, please note that no system can guarantee complete security. We recommend keeping your order and account details confidential and contacting us if you suspect any unauthorised access.

Policy Updates

This Privacy Policy is subject to regular review and may be updated occasionally to reflect operational or legal changes. The date of the latest update is shown at the bottom of this page. Continued use of our services after such changes constitutes your acceptance of the revised Policy.

Contact and Concerns

If you have any questions, concerns, or wish to exercise your rights under GDPR, please refer to the contact options on our website or the details in your order confirmation. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

Last updated: June 2024