Privacy Policy for Flower Delivery South Hornchurch Orders

Introduction

This Privacy Policy describes how Flower Delivery South Hornchurch ("we", "us", or "our") collects, uses, and protects your personal data when you place flower delivery orders within South Hornchurch and the surrounding districts. We are committed to respecting your privacy, complying with the United Kingdom General Data Protection Regulation (UK GDPR), and ensuring transparency regarding the processing of your personal information.

Scope of this Policy

This Privacy Policy applies to all financial and non-financial information collected from customers ("you") who purchase or place orders for flower delivery through Flower Delivery South Hornchurch, regardless of the method you use (for example, our website, telephone, or in-person orders). This Policy also applies to both individuals and businesses making or receiving orders for South Hornchurch and its surrounding areas.

Information We Collect

To fulfil your flower delivery orders, we collect different types of personal data, including:

• Identity Data: Your first name, last name, and, where applicable, the names of recipients.
• Contact Data: Delivery address, billing address, telephone number, and, if provided, your email address.
• Transaction Data: Details about the products you order, transaction amount, payment method (but not card numbers or financial information processed by third-party payment services), order dates, and purchase history.
• Message Content: Any personalised message or note you ask us to send with the flowers.
• Communications Data: Records of your communications with us such as queries, feedback, and requests for support or information.
• Technical Data (on digital orders): IP address, browser type and version, device identifiers, and how you interact with our website (via cookies and analytics tools, where applicable).

Lawful Basis for Processing Your Data

Under the UK GDPR, Flower Delivery South Hornchurch processes your personal data based on several lawful grounds:

• Performance of a Contract: Most of the data we collect is required to fulfil your order and provide our services to you. Without this information, we cannot deliver your purchase or communicate with you about your order.
• Legal Obligations: We may need to process or retain certain data to comply with legal and regulatory obligations, such as tax and accounting requirements.
• Legitimate Interests: In some circumstances, we may use your personal data for our legitimate business interests, such as improving our services, preventing fraud, and maintaining network and information security. Where we do this, we ensure our interests do not override your rights.
• Consent: If you opt-in to marketing communications, we rely on your consent to send you promotional offers. You can withdraw such consent at any time.

How We Use Your Personal Data

We use your personal data to:

• Process and deliver your flower orders accurately and promptly.
• Verify your identity, where necessary, to protect against fraud.
• Communicate with you regarding your orders, including confirming orders and providing delivery updates.
• Respond to your queries, requests or feedback.
• Maintain proper records for accounting and legal purposes.
• Perform analytics to improve our website, products, and customer service (data in aggregated or anonymised form where possible).
• Send you service-related or, where you have consented, marketing communications.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for the fulfilment of orders, compliance with legal, accounting, or reporting requirements, and resolving any complaints or disputes. In general:

• Order and transactional records are retained for up to 7 years, as required under tax and accounting laws.
• Contact data used for marketing is retained until you withdraw your consent or opt-out.
• Communications data may be kept for up to 2 years for quality assurance and dispute resolution.

At the end of the relevant retention period, your data will be securely deleted or anonymised.

Data Processors and Third Parties

We may use trusted third-party service providers ("processors") to assist with payment processing, order management, website hosting, analytics, and delivery logistics. All processors are contractually bound to safeguard your personal data and are prohibited from using it for any other purpose than providing the contracted services on our behalf. We ensure that they adhere to GDPR requirements and maintain appropriate security measures.

We do not sell or rent your personal data to any third party and only share your data where necessary for the fulfilment of your order or as required by law.

International Data Transfers

We aim to store and process your data within the United Kingdom or European Economic Area (EEA) as much as possible. Should it be necessary to transfer data to a processor outside of these territories, we ensure that appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are in place to protect your data to the standard required by UK GDPR.

Your Rights under GDPR

As a data subject, you have the following rights with respect to your personal data:

• Access: You can request access to the personal data we hold about you.
• Rectification: You can request corrections to any inaccurate or incomplete data.
• Erasure: You can request that we delete your personal data, subject to certain legal or contractual restrictions.
• Restriction of Processing: You can ask us to limit how we use your data in certain circumstances.
• Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format to be sent to you or another data controller.
• Objection: You can object to our processing of your data where we are relying on legitimate interests or direct marketing as the lawful basis.
• Withdraw Consent: If we process your data based on consent (such as for marketing), you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided on our website or via your preferred communication method. We may require verification of your identity before processing your request. We aim to respond to all legitimate requests within one month.

Security of Your Data

We take data security very seriously. We have put in place appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration, or disclosure. These include secure servers, password protection, and restricted access controls. However, please note that no method of transmission or storage is entirely secure and we cannot guarantee absolute security.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or as required by law. Any updates will be posted on our website and will be effective from the date of publication.

Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how we handle your data, please reach out via the contact details on our website. If you are unsatisfied with our response, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

This Policy is effective as of 2024 and applies to all data collected or processed by Flower Delivery South Hornchurch in connection with flower deliveries to South Hornchurch and neighbouring districts.