Our Commitment to Your Privacy – Flower Delivery Collier Row

Privacy Policy – Flower Delivery Collier Row

This Privacy Policy explains how Flower Delivery Collier Row ("we," "us," or "our") collects, uses, stores, and protects your information when you place an order with us in Collier Row and the surrounding districts. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all relevant data protection laws in the United Kingdom.

Scope of This Privacy Policy

This Privacy Policy applies to all individuals who place flower delivery orders with Flower Delivery Collier Row, whether online, by phone, or in person, within Collier Row and neighboring districts. By ordering from us, you agree to the collection and use of your personal information as described herein.

Personal Data We Collect

When you place an order or interact with Flower Delivery Collier Row, we may collect the following types of personal data:

• Identity Data: Such as your name and, when applicable, recipient's name.
• Contact Data: Such as delivery address, billing address, and telephone number.
• Order Data: Details of your orders, purchased items, and delivery date.
• Payment Data: Payment method information (such as the name of your card provider), transaction reference, but never your full payment card details as these are always processed by our third-party payment processors in a secure manner.
• Communication Data: Information you provide during correspondence with us, feedback, or complaint details.
• Technical Data: IP address, browser type and version, time zone, device type, and other technology on the devices you use to access our website, if applicable.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. The lawful grounds we rely on are as follows:

• Contractual Necessity: We process personal information to fulfill your order, including delivering flowers and communicating about your order’s status.
• Legal Obligation: We may process your data as required by law, such as maintaining financial records for tax purposes.
• Legitimate Interest: We may use your personal data to improve our services, prevent fraud, and respond to enquiries. We ensure our legitimate interests do not override your data protection rights.
• Consent: Where required, for example, in sending marketing communications, we will seek your clear and explicit consent first. You are free to withdraw your consent at any time.

How We Use Your Data

We use your personal data to:

• Process and deliver your orders
• Create invoices and process payments
• Communicate with you about orders, requests, and feedback
• Handle customer support and resolve complaints
• Monitor website usage to optimise our website experience (where applicable)
• Comply with legal and regulatory obligations

Data Processors and Sharing

To provide efficient and secure services, we work with carefully selected third-party service providers ("processors"). These include:

• Payment Processors: Who securely handle payment transactions.
• IT and Cloud Service Providers: Who facilitate our website and order management systems.
• Delivery Partners: Where necessary, for delivering your flowers.

We require all processors to respect the security and confidentiality of your personal data and to process it according to our instructions and in compliance with the GDPR. We never sell or lease your data to external organisations.

Data Retention: How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information:

• Order and Invoice Data: Retained for up to 7 years for accounting and tax purposes, as required by law.
• Communication Data: Retained for up to 24 months after the resolution of your enquiry or complaint.
• Marketing Data: Retained until you withdraw your consent or unsubscribe.
• Website Usage Data: Typically retained for up to 2 years to analyse and improve website performance.

Once your data is no longer needed, it will be securely deleted or anonymised.

Your Data Protection Rights

Under the GDPR, you have specific rights in relation to your personal data. These include:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request corrections to inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to legal and contractual obligations.
• Right to restrict processing: You may request the restriction or suppression of your personal data under certain circumstances.
• Right to data portability: You may request to receive your data in a commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data where our lawful basis is legitimate interest.
• Right to withdraw consent: Where we process your data based on consent, you can withdraw it at any time.

To exercise your rights, please contact us using the details provided on our website or in-store. For your security, we may ask you to verify your identity before fulfilling any data-related requests.

How We Secure Your Data

Your data security is a top priority. We apply appropriate technical and organisational measures to safeguard your personal data against unauthorised access, alteration, loss, or destruction. These measures may include data encryption, access controls, secure servers, and staff training.

International Transfers

Wherever possible, we store and process your data within the UK or European Economic Area (EEA). If we must transfer data outside these regions (for instance, if a processor’s server is located abroad), we will ensure adequate safeguards are in place, as required under the GDPR.

Changes to This Privacy Policy

This Privacy Policy may be updated occasionally to reflect changes in our practices or legal requirements. The most current version will always be available on our website or at our store. Please check this Policy from time to time for updates.

Contact and Complaints

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us via the methods provided on our website or in person at our store. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe that your personal data has not been handled appropriately.

Thank you for choosing Flower Delivery Collier Row. We value your trust and are dedicated to respecting and safeguarding your privacy.