Privacy Policy for Customers of Flower Delivery Thornton Heath

Introduction

This Privacy Policy outlines how Flower Delivery Thornton Heath ('we', 'us', or 'our') collects, processes, stores, and protects your personal data when you place orders for flower delivery in Thornton Heath and its surrounding districts. We are dedicated to respecting your privacy and complying fully with the UK General Data Protection Regulation (GDPR) and related laws. This policy applies to all customers who interact with our services in these areas.

Personal Data We Collect

When you place an order or interact with Flower Delivery Thornton Heath, we may collect the following types of personal data:

• Contact Details: Including your name, address, phone number, and delivery address details.
• Order Information: Details about products ordered, order history, and preferences.
• Payment Information: Payment card details and transaction information (handled securely by payment processors).
• Communications: Records of your communication with us, including queries, feedback, and customer support requests.
• Technical Data: IP address, browser type, device type, and interactions with our website (through cookies or similar technologies, where applicable and with consent).

Lawful Basis for Processing Your Data

Under the GDPR, we rely on specific lawful bases to process your personal data:

• Contractual Necessity: Most data processing is necessary for the performance of the contract to deliver your order and provide customer service.
• Legal Obligations: We may process data to fulfil legal and regulatory requirements (for example, maintaining transaction records for tax purposes).
• Legitimate Interests: We may process your data for legitimate business interests such as improving our services, ensuring site security, and preventing fraud, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your explicit consent (such as for certain types of marketing or cookie use), you may withdraw this consent at any time.

How We Use Your Information

We use the information collected for the following purposes:

• Processing and fulfilling your flower delivery orders.
• Providing customer support and responding to your queries.
• Processing payments and preventing fraudulent transactions.
• Sending service-related communications (such as order confirmations, delivery notifications, and updates).
• Improving our products, website, and services.
• Complying with legal, regulatory, or contractual obligations.

Data Sharing and Processors

We never sell your personal data. However, we may share necessary information with trusted third-party service providers ('processors') that help us deliver our service. These may include:

• Payment Processors: To securely process payments for your orders. Your payment information is handled directly by our payment providers.
• Delivery Partners: To fulfil and deliver your orders within Thornton Heath and nearby districts.
• IT Service Providers: Companies providing website hosting, cyber security, and maintenance, who only access data as needed under strict confidentiality obligations.

All processors are required by contract to protect your data and act only on our instructions, in compliance with GDPR.

International Data Transfers

Where we use third-party providers based outside the UK or European Economic Area (EEA), your data may be transferred internationally. We ensure any such transfers comply with GDPR by using approved safeguards such as Standard Contractual Clauses or where an adequacy agreement is in place.

Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting obligations.

• Order and transaction records: retained for up to 7 years for tax and financial compliance.
• Customer support records: retained for up to 3 years after the enquiry is resolved.
• Marketing preferences: retained until you withdraw your consent or ask for deletion.
• Technical data: duration dependent on website analytics and security protocols, generally not exceeding 2 years.

When personal data is no longer required, it is securely deleted or anonymised.

Your Rights Under GDPR

As a customer of Flower Delivery Thornton Heath, you have several important rights over your personal data under GDPR:

• Right of Access: You may request access to the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data, in certain circumstances.
• Right to Restriction: You can ask us to limit processing of your data in certain cases.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests or direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any point.

To exercise your rights or for data-related concerns, you can contact us using the contact details provided on our website. We may require identification to fulfil your request.

Security of Your Personal Data

We are committed to ensuring that your information is secure. We maintain appropriate technical and organisational measures to safeguard your data against unauthorised access, disclosure, alteration, or destruction.

Policy Updates

We reserve the right to update or amend this Privacy Policy at any time. Changes will be effective upon posting to our website. We encourage you to review this policy regularly to stay informed about how we protect your data.

Contact and Complaints

If you have questions about this Privacy Policy or how we handle your data, please refer to our website for information on how to contact our support team. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.

Date of Last Update: 7 June 2024