Flower Delivery Dollis Hill Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Dollis Hill ("we", "our", or "us") collects, uses, stores, and protects your personal data when you place an order with us. This policy applies to all customers placing Flower Delivery Dollis Hill orders from Dollis Hill and the surrounding districts. We are committed to processing personal information in compliance with the UK General Data Protection Regulation (GDPR) and other relevant data protection laws.

What Data We Collect

We collect only the personal data necessary to provide our flower delivery services, to manage our customer relationships, and to fulfil our legal obligations. The types of data we may collect include:

• Identification Data: Titles, names, and delivery recipient's names.
• Contact Information: Addresses for delivery and billing, and in some cases phone numbers (if required for delivery coordination).
• Order Information: Details of purchases, order history, delivery instructions, and messages for the recipient.
• Payment Information: Card transaction details. Note: We do not store complete payment card numbers; these are processed via trusted third-party payment processors.
• Device & Technical Data: IP address, browser type, and time of access for website visitors, to ensure website security and functionality.
• Communications: Records of correspondence and customer service inquiries.

Lawful Basis for Data Processing

Under the GDPR, we process personal data only when a lawful basis applies. Our grounds for processing your personal data include:

• Contractual Necessity: To fulfil our contract with you when processing, dispatching, and delivering your flower order.
• Legal Obligation: When required to retain transaction records or comply with relevant tax and business regulations.
• Legitimate Interests: For security purposes, service improvement, order verification, and to prevent fraud. We always balance these interests against your rights.
• Consent: In limited circumstances, such as for marketing purposes (where separate, explicit consent is requested).

How We Use Your Data

Your personal data is used in the following ways:

• To process and deliver your orders accurately and efficiently.
• To communicate with you about your order, delivery, or customer support matters.
• To improve our services, customise your experience, and enhance our website’s functionality.
• To fulfil our legal, regulatory, and tax obligations.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally:

• Order and transaction data is retained for up to 7 years for tax and accounting compliance, in line with legal obligations.
• Contact and communication data related to support queries may be held up to 3 years after the completion of service.
• Marketing consent records, if applicable, are retained until you withdraw your consent or request deletion.

When it is no longer necessary to retain your data, it will be securely deleted or anonymised.

Data Processors and Third Parties

We may share your personal data with selected third parties (processors) to enable the effective provision of our services. These may include:

• Payment Processors: To handle card payments and process transactions securely.
• Delivery Partners: To ensure your orders are delivered to the correct recipient and address.
• IT Service Providers: For website hosting, email communications, and order management systems.
• Professional Advisors: Such as accountants or legal advisors for compliance with business obligations.

All third parties we engage are contractually required to uphold data privacy and security commitments aligned with GDPR standards. We do not sell, trade, or otherwise transfer your personal data to unrelated third parties for marketing or other purposes.

International Data Transfers

In rare circumstances, personal data may be processed or stored by third-party providers outside the UK or European Economic Area (EEA). In such cases, we ensure an adequate level of data protection is provided, typically through contractual clauses or an adequacy decision under the GDPR.

Your Data Protection Rights

Under GDPR, you have various rights regarding your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to correct inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data, provided there is no lawful reason for retention.
• Right to Restrict Processing: To limit the ways in which we process your personal data.
• Right to Data Portability: To receive personal data you have provided to us in a structured, machine-readable format.
• Right to Object: To object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where you have provided consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us. We may need to verify your identity before fulfilling your request. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority if you believe we have not complied with data protection law.

Data Security

We implement suitable technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. These include secure servers, encrypted transactions, and limited access to your data by authorised personnel only.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make changes, we will update the revision date at the bottom of this document. We encourage you to review this page regularly for the latest information.

Contact and Further Information

For further information about our privacy practices or to exercise your rights, please contact us using the details provided on our website. We are happy to address any concerns or provide additional information regarding the processing of your personal data.

Last updated: 2024