Privacy Policy for Flower Delivery Southfields

Introduction

This Privacy Policy explains how Flower Delivery Southfields ("we", "us", "our") collects, uses, and protects your personal data when you place flower delivery orders in Southfields and surrounding districts. We act in full compliance with the General Data Protection Regulation (GDPR) and all applicable UK data protection laws. By using our services, you agree to the practices described in this document.

Scope of Policy

This policy applies to all customers who place flower delivery orders with Flower Delivery Southfields for addresses within Southfields and its surrounding districts. It covers information collected via our website, by phone, in person, or through other direct communications.

What Data We Collect

We collect and process a range of personal data in order to fulfil your order and provide an efficient service. The types of data we collect include:

  • Contact Information: Name, billing and delivery addresses, telephone number.
  • Order Details: Purchase history, specific floral requests, messages to recipients.
  • Payment Information: Details required to process payments (handled securely via our payment processor; we do not store full card details).
  • Communication Records: Correspondence with our customer service team regarding orders or queries.
  • Website Usage Data: IP address, browser type, time zone setting, operating system, and information about how you use our website. This is collected via cookies and similar technologies.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. Our lawful bases include:

  • Contractual Necessity: Processing your data is necessary to fulfil our contract with you, such as completing your order, processing payment, and arranging delivery.
  • Legal Obligation: We may need to retain certain records for legal and tax purposes.
  • Legitimate Interests: We may use your data for our legitimate business interests, so long as those interests do not override your rights and freedoms. For example, monitoring our website’s performance or improving our services.
  • Consent: In some cases, we may ask for your explicit consent (e.g., for marketing communications). You have the right to withdraw consent at any time.

How We Use Your Data

We use your personal data to:

  • Process and deliver your orders efficiently and accurately.
  • Communicate with you regarding your orders, modifications, cancellations, or any service-related queries.
  • Process payments securely through trusted payment partners.
  • Comply with legal and regulatory requirements.
  • Analyze website usage to improve user experience.
  • (If you consent) Send you marketing communications and updates about our products and offers.

Data Processors and Third Parties

To facilitate our services, we may share your data with trusted third-party service providers ("processors") who handle personal data on our behalf. These may include:

  • Payment Processors: For secure processing of payments; we never store complete card details.
  • Delivery Partners: For arranging delivery of your orders to your chosen address.
  • IT and Hosting Providers: For website hosting, database management, and related IT services.

We require all processors to keep your data secure and to use it only to provide the services we have requested. We do not sell or rent your personal data to any third party.

How We Protect Your Data

Your information is stored securely using physical, electronic, and administrative safeguards. Access to your data is restricted to authorised staff and contractors who need the information to process your orders. We regularly review our security procedures to ensure your data is protected against loss, unauthorised access, or misuse.

Retention of Data

We keep your personal data only as long as necessary to fulfil the purposes for which it was collected, including fulfilling orders, handling customer service issues, and complying with legal obligations (such as accounting and tax requirements). This typically means retaining order and transaction information for seven years after your last transaction, while website usage data may be anonymised and retained for analytics. Once your data is no longer needed, it is securely deleted or anonymised.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
  • Right to Erasure: In certain circumstances, you may request that your data be erased (“right to be forgotten”).
  • Right to Restrict Processing: You may ask us to restrict or suspend processing of your data under certain conditions.
  • Right to Data Portability: Where applicable, you can ask to receive your data in a portable, machine-readable format.
  • Right to Object: You can object to our processing of your personal data where we rely on legitimate interests or direct marketing as the lawful basis.
  • Right to Withdraw Consent: If you’ve given consent (such as for marketing), you can withdraw it at any time.

To exercise any of these rights, or if you have any questions about how your data is handled, please contact us using the methods provided on our website.

Updates to This Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When changes are made, we will revise the "last updated" date on the policy. We encourage you to review this policy periodically.

Contact and Further Information

If you have questions about this Privacy Policy or would like more information about how we handle your data, please contact us using the details provided on our website. We are committed to respecting and protecting your privacy at all times.