Flower Delivery Crofton Park Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Crofton Park collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. This policy applies to all customers placing orders with Flower Delivery Crofton Park from Crofton Park and the surrounding districts. Please read this document carefully to understand your rights and our responsibilities regarding your personal information.

Data We Collect and How We Collect It

To fulfil your flower delivery orders and provide you with the best possible service, we collect the following categories of personal data:

• Contact Details: Relevant information such as your full name, delivery address, and contact information (for example, phone number only when necessary for delivery coordination).
• Order Details: Information about your order, including the type of flowers, delivery instructions, recipient information, payment details (processed securely through trusted payment providers), and order history.
• Payment Information: Payment transactions are processed securely by third-party payment processors; we do not store your complete payment card information on our systems.
• Customer Correspondence: Communication between you and Flower Delivery Crofton Park, such as order enquiries, feedback, or complaints, may be recorded to help resolve any issues and improve our services.
• Website Usage Data: Technical information, such as your IP address, browser type, device details, and website interaction (collected through cookies or similar technologies for security, analytics, and improvement of our online services).

Lawful Basis for Processing Your Data

Under the GDPR, we are required to have a lawful basis for processing your personal data. Flower Delivery Crofton Park processes your information based on the following grounds:

• Contractual Necessity: For the purposes of processing and fulfilling your order, including communicating with you regarding your delivery.
• Legitimate Interests: To carry out market analysis, improve our services, and ensure the security of our website and operations, provided these interests are not overridden by your fundamental rights and freedoms.
• Legal Obligations: To comply with legal and regulatory requirements, such as retaining transaction records for tax and accounting purposes.
• Consent: Where you have provided clear consent (such as subscribing to marketing communications), you have the right to withdraw your consent at any time.

How We Use Your Personal Data

Your data is used for the following purposes:

• Processing and fulfilling your flower delivery orders
• Delivering flowers and gifts to your chosen recipients
• Providing customer support and responding to your enquiries or feedback
• Communicating important information concerning your orders
• Maintaining and improving our website, products, and services
• Complying with our legal and regulatory obligations

Retention of Your Data

Flower Delivery Crofton Park retains your personal data only for as long as necessary to fulfil the purposes for which the data was collected and to comply with legal obligations, resolve disputes, and enforce our agreements. Typically, we retain:

• Order information: Up to 7 years, to comply with financial regulations and provide customer service regarding past orders.
• Customer correspondence: Up to 2 years, unless it relates to a legal dispute or ongoing issues which may require longer retention.
• Marketing preferences: Until you withdraw your consent or unsubscribe from our marketing communications.
• Technical and website data: Usually retained for no longer than 26 months for analytics purposes.

Data that is no longer required or where the lawful basis no longer applies will be securely deleted or anonymised.

Data Processors and Third Parties

In order to deliver your order and provide our services, we occasionally need to share your data with trusted third-party providers. These may include:

• Payment Processors: To handle secure payments for orders placed through our website or by phone.
• IT Service Providers: Including website hosting and support, email communication tools, and secure data storage providers.
• Delivery Partners: For the purposes of fulfilling your flower delivery orders to the specified recipients.
• Professional Advisors: Such as accountants or legal advisors, for compliance with regulatory obligations.

All third-party data processors are carefully vetted to ensure they comply with relevant data protection laws and only process your data as necessary to provide their services. We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

User Rights Under GDPR

Under the Data Protection Act 2018 and the GDPR, individuals have a number of rights regarding their personal data. These include:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any incomplete or inaccurate information we hold about you.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted from our systems.
• Right to Restrict Processing: You can ask us to restrict the processing of your data under certain conditions.
• Right to Data Portability: You may request the transfer of your data to another service provider where technically feasible.
• Right to Object: You can object to our processing of your data where we rely on legitimate interests, or to direct marketing at any time.
• Rights Relating to Automated Decision Making: We do not make any automated decisions that would legally or significantly affect you based solely on automated processing.

To exercise any of these rights, or if you have any questions about this policy or our data handling practices, please contact us using the methods displayed on our website or by writing to our business address.

Data Security

We take your privacy and data security seriously. Flower Delivery Crofton Park employs appropriate technical and organisational safeguards to protect your data from unauthorised access, alteration, disclosure, or destruction. Our systems are regularly reviewed and updated to keep your information safe. Payment transactions are encrypted and handled by PCI-DSS compliant providers.

Policy Updates

We may review and update this Privacy Policy to reflect changes in our processes, services, or changes in relevant laws and regulations. Any updates will be posted on this page, so we encourage you to review this policy periodically.

Contact and Complaints

If you wish to enquire about how we process your personal information, exercise your data rights, or make a complaint, please contact us through the contact details provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unsatisfied with our response or data protection practices.