Flower Delivery Addington Privacy Policy
Privacy Policy for Flower Delivery Addington
This Privacy Policy explains how Flower Delivery Addington (“we”, “our”, or “us”) collects, uses, shares, and safeguards personal data relating to our customers. It applies to all individuals placing orders for flower delivery services with Flower Delivery Addington, whether located in Addington or the surrounding districts. We are committed to ensuring your privacy and complying with the requirements of the General Data Protection Regulation (GDPR).
1. What Data We Collect
To process your flower delivery orders and enhance your experience, we may collect the following categories of personal data:
- Identity Data: Name, title, and, if provided, special instructions such as dedications or messages.
- Contact Data: Delivery address, billing address, and contact phone number.
- Order Information: Details about the bouquet or flower arrangements ordered, order notes, and delivery instructions.
- Payment Data: Payment method and confirmation (note: we do not store full payment card numbers; these are handled securely by our payment processors).
- Technical Data: IP address, browser type, device information, and access times when using our website.
- Communication Data: Records of communications, including order confirmations and customer service interactions.
2. Lawful Basis for Processing Your Data
Under the GDPR, we process personal data only where we have a lawful basis for doing so. The lawful bases relevant to our operations include:
- Contractual Necessity: We process your personal data in order to fulfill our contract with you, such as processing and delivering your order.
- Legal Obligation: We may process your data to comply with regulatory or legal requirements, including accounting and tax obligations.
- Legitimate Interests: We may use your personal data for purposes such as customer service improvement, order verification, fraud prevention, and ensuring network and information security, provided these interests are not overridden by your data protection rights.
- Consent: In certain cases (such as for marketing communications not related to your order), we will obtain your explicit consent before processing your data. You may withdraw consent at any time.
3. How We Use Your Information
The personal information we collect is used for the following purposes:
- To accept and process your flower delivery orders.
- To arrange for delivery at the specified address and according to your instructions.
- To communicate with you about your order status and delivery.
- To resolve any issues or respond to your queries regarding orders.
- For internal record-keeping, fraud prevention, and quality assurance.
- If you have provided permission, to notify you about offers, services, or updates from Flower Delivery Addington.
4. Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. In particular:
- Order and customer records are typically retained for up to seven years to comply with legal and financial obligations.
- Marketing communication preferences and records are retained for as long as you choose to receive such communications, or until you withdraw consent.
- Website usage logs are kept for up to twelve months to assist with troubleshooting and security audits.
At the end of the relevant retention period, or upon your request (where applicable), your data will be securely deleted or anonymized.
5. Data Processors and Sharing
We may share your personal data with trusted third-party service providers (“processors”) who assist with essential business operations, such as:
- Payment processors handling transactions securely and ensuring payment verification.
- Delivery partners for logistical coordination needed to fulfil your order.
- IT and web hosting providers for secure data storage and maintenance of our ordering platform.
- Professional advisers including accountants, lawyers, insurers, or regulators as required by law.
All processors act under our instruction and are contractually obliged to process your data only for the purposes instructed and to maintain appropriate security over your data. We do not sell or rent your personal information to any third party.
6. International Data Transfers
Your personal data is stored and processed within the United Kingdom or the European Economic Area (EEA). If data must be transferred outside these areas for any reason, we will ensure appropriate safeguards (such as standard contractual clauses) are in place to maintain your data protection rights.
7. Data Security
We take the security of your personal information seriously. Measures are in place to prevent accidental loss, unauthorized access, alteration, or disclosure, including the use of encryption, secure servers, and ongoing security monitoring. Access to your data is limited to those employees, agents, contractors, and processors who have a business need to know such information.
8. Your GDPR Rights
Under the GDPR, you have several rights regarding your personal data. These include:
- Right of Access: You may request access to the data we hold about you.
- Right to Rectification: If any of your information is incorrect or incomplete, you can request it to be updated.
- Right to Erasure: You may request the deletion of your personal data, where legitimate grounds exist.
- Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
- Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format, or have that information transmitted to another controller.
- Right to Object: You may object to our processing of your data where we rely on legitimate interest as a lawful basis.
- Right to Withdraw Consent: If processing is based on your consent, you may withdraw it at any time.
If you wish to exercise any of these rights or have questions about your data, please contact us through the usual communication channels listed on our website or when placing your order.
9. Changes to This Policy
This policy may be updated periodically to reflect changes in legal requirements or our processing practices. When significant changes are made, we will inform you in advance where required.
10. Contacting Flower Delivery Addington
If you have any questions about this Privacy Policy, your data, or how we handle privacy and security, please reach out using our official contact options as displayed on our website or as provided when you place your order.