Flower Delivery South Tottenham Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery South Tottenham collects, uses, and safeguards the personal data of customers placing flower delivery orders in South Tottenham and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring your privacy rights are respected and upheld throughout your interactions with us.

Scope of the Policy

This policy applies to all individuals who place orders for flower delivery through Flower Delivery South Tottenham, whether directly or via third-party platforms, within the geographic area of South Tottenham and its neighboring districts.

Personal Data We Collect

We collect the following categories of personal data from our customers and, where applicable, recipients of flower deliveries:

  • Contact Information: Name, delivery address, billing address, and telephone number.
  • Order Details: Information about the products you order, purchase history, order preferences, and delivery instructions.
  • Payment Information: Payment method details (note: payment card data is processed securely by our payment processor and is not stored by us).
  • Communication Records: Details of communications you send to us, including queries, feedback, or complaints.
  • Technical Information: IP address, browser type, date and time of order, and device information where applicable, collected through our website for security and analytics.

Lawful Basis for Processing

We process your personal data under the following lawful bases established by the GDPR:

  • Contractual Necessity: To fulfill your order, deliver products, and process payments, which is necessary for the performance of our contract with you.
  • Legal Obligation: To comply with legal and regulatory requirements, such as maintaining records for tax and accounting purposes.
  • Legitimate Interests: To improve our products and services, handle customer queries, ensure the security of our systems, and prevent fraud. We carefully balance our interests with your rights and freedoms.
  • Consent: Where required, such as for marketing communications, we will seek your explicit consent. You may withdraw consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

  • Processing and fulfilling your flower delivery orders, including communicating with you about your order status.
  • Delivering products to specified recipients at the requested address.
  • Processing payments and refunds as necessary.
  • Providing customer support and responding to your enquiries.
  • Improving the functionality, safety, and quality of our services.
  • Complying with legal and regulatory obligations.
  • Sending you service-related communications and, where permitted, marketing communications.

Personal Data Retention

We retain your personal data only for as long as it is necessary to fulfill the purposes for which it was collected, including the following typical retention periods:

  • Order and transaction data: retained for up to seven years to meet tax, accounting, and legal requirements.
  • Customer account data: retained until you request closure of your account or deletion of your data, subject to legal and contractual obligations.
  • Marketing data: retained until you withdraw your consent or opt out from receiving marketing communications.

Once the applicable retention period expires, we securely delete or anonymize your personal data.

Data Processors and Sharing

We may share your data with selected third-party service providers (known as data processors) solely for the purposes detailed in this policy. These include:

  • Payment processing providers to facilitate secure payments.
  • Courier or delivery partners to carry out deliveries as per your order instructions.
  • IT service providers who support our website and customer management systems.
  • Regulatory authorities or law enforcement if required by law.

We require all processors to adhere to GDPR requirements, process data only on our instructions, and implement appropriate security measures. We do not sell or rent your personal data to third parties for their own marketing purposes.

Your Data Protection Rights

Under the GDPR, you have a range of rights regarding your personal data, including:

  • Right to Access: You have the right to request copies of your personal data we hold.
  • Right to Rectification: You can request corrections or updates to your information if it is inaccurate or incomplete.
  • Right to Erasure: You may request deletion of your data in certain circumstances (for example, when data is no longer necessary for the purpose it was collected).
  • Right to Restrict Processing: You can request we limit or suspend processing under certain conditions.
  • Right to Data Portability: You are entitled to receive your information in a portable, machine-readable format and transmit it to another controller.
  • Right to Object: You may object to processing where we rely on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

If you wish to exercise any of these rights, please contact us through the contact information provided on our website.

Data Security

We implement industry-standard security measures, including encryption, access controls, and regular system assessments, to protect personal data against unauthorized access, alteration, disclosure, or destruction.

International Data Transfers

Your data is primarily processed within the United Kingdom. If data is transferred outside the UK or the European Economic Area (EEA), we ensure such transfers are in accordance with applicable data protection laws and that adequate safeguards are in place.

Policy Updates

We may amend this Privacy Policy from time to time. Any significant changes will be posted on our website, and where appropriate, we will notify you directly.

Contact Us

If you have questions about this Privacy Policy or your rights under GDPR, please refer to the contact section on our website to get in touch. We are committed to addressing any concerns promptly and transparently.