Flower Delivery Greenford GDPR Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Greenford ('we', 'us', or 'our') collects, uses, stores, and safeguards personal information from customers placing orders from Greenford and the surrounding districts. Our commitment is to ensuring your privacy and compliance with the General Data Protection Regulation (EU) 2016/679 ('GDPR'), as well as applicable UK data protection laws. By using our services, you agree to the practices described in this policy.

Scope of This Policy

This Privacy Policy applies to all personal data processed by Flower Delivery Greenford in connection with the provision of flower delivery services to customers located in Greenford and the surrounding areas. This includes data collected through our website, phone orders, and in-person visits to our shop. The policy covers customers, recipients, and anyone interacting with our service for the purpose of ordering and delivering flowers.

What Personal Data We Collect

In the course of providing our services, we may collect and process the following types of personal information:

• Customer Information: Name, billing and delivery addresses, telephone number, and payment details.
• Order Details: Products ordered, order history, and delivery instructions.
• Recipient Information: Name and delivery address of the recipient. If included by the customer, we may also collect recipient contact number and card message.
• Communication Data: Interactions with our customer service team, feedback, and correspondence.
• Technical Data: IP address, browser type and version, device information, cookies, and usage data collected through our website for functional and analytical purposes.

We do not collect or process any special categories of personal data (such as health or biometric data) as part of our service.

Lawful Basis for Processing

Under GDPR, we rely on several legal bases for processing your personal data:

• Performance of Contract: Most data is processed to fulfill your order and deliver the products you have requested. This includes processing payment, delivery logistics, and customer communication.
• Legitimate Interests: We may process information to improve our services, prevent fraud, and ensure network security. We ensure that our legitimate interests do not override your privacy rights.
• Legal Obligations: In some cases, we may be required to process and retain data to comply with applicable laws, such as taxation or accounting.
• Consent: Where necessary (for example, for direct marketing communications), we will obtain your consent before processing your information. You have the right to withdraw your consent at any time.

How We Use Your Data

The personal information we collect is used for the following purposes:

• Processing and fulfilling customer orders for flower delivery.
• Communicating with customers regarding orders, delivery status, updates, and customer support requests.
• Processing payments and, where necessary, facilitating refunds.
• Improving the quality of our services through analysis and feedback.
• Sending marketing communications, subject to your preferences and where lawful to do so.
• Complying with legal and regulatory requirements.

Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. Typically, customer order data is retained for a period of six years to align with statutory tax requirements. Where consent has been provided for marketing, we will retain relevant details until you withdraw your consent or request deletion. After the retention period, data is securely deleted or anonymised.

Data Processors and Third Parties

We may share your personal information with trusted third parties (data processors) for specific purposes:

• Payment Processing Companies: To securely process your payments for orders placed.
• IT and Hosting Providers: For secure storage of website and operational data.
• Delivery Partners: To ensure timely delivery of your order to the address provided.
• Professional Advisors: Where necessary, for legal, accounting, or compliance purposes.

All third-party processors are vetted to ensure they process your data in line with GDPR requirements. Your information will not be sold or rented to third parties, nor shared with them for their independent marketing purposes.

International Data Transfers

Where possible, your data is processed and stored within the United Kingdom or the European Economic Area (EEA). If any data transfer outside these areas is necessary, we ensure appropriate safeguards are in place as required by GDPR, such as Standard Contractual Clauses or an adequacy decision.

Your Rights Under GDPR

Under the GDPR, you have specific rights regarding your personal data. You have the right to:

• Access the personal data we hold about you.
• Request correction of any incorrect or incomplete data.
• Request erasure of your personal data where there is no lawful reason for us to keep it.
• Object to or restrict certain types of processing, including direct marketing.
• Request the transfer of your data to another service provider (data portability, where applicable).
• Withdraw consent at any time, where processing is based on your consent.

If you wish to exercise your rights, please contact our Data Protection Officer. We may request proof of identity to ensure your data is protected against unauthorised access. We aim to respond to all legitimate requests within one month.

Data Security

We are committed to protecting your personal data. We implement appropriate technical and organisational measures designed to safeguard your information from accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. While we do our best to protect your data, no security system is entirely foolproof. If we become aware of any data breach affecting your personal information, we will notify you in accordance with applicable laws.

Updates to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time in response to changing legal, technical, or business developments. Updates will be posted here, and we encourage you to review the policy periodically.

Contacting Us

If you have questions about this Privacy Policy or our data protection practices, please reach out to our Data Protection Officer or contact us through the usual Flower Delivery Greenford customer service channels. We are always happy to clarify your rights and discuss how we protect your personal data.