Flower Delivery Carshalton Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery Carshalton collects, processes, and protects your personal data. We respect your privacy and are committed to complying with the General Data Protection Regulation (GDPR) and all relevant data protection laws in the United Kingdom. This policy applies to all customers who place flower delivery orders with us from Carshalton and surrounding districts, whether orders are placed online, by phone, or in person.

What Data We Collect

We collect a variety of personal information to process your orders, provide good service, and meet our legal obligations. Depending on how you interact with us, the following categories of data may be collected:

• Identity Data: Your full name (and the recipient's name, if applicable).
• Contact Data: Your telephone number, postal address, and delivery address (for yourself and gift recipients), as well as contact details such as your email address.
• Order Data: Details about your flower order, including product selections, delivery instructions, and gift card messages.
• Payment Data: Limited payment information needed to process transactions (we do not store complete payment card details).
• Technical Data: Your IP address, browser type and version, time zone setting, operating system, platform, and information on how you interact with our website.
• Usage Data: Aggregated data regarding how you use our services, website sections visited, and features used.
• Feedback and Correspondence: Records of communication and any feedback you provide to us about our services.

The Lawful Basis for Data Processing

Under the GDPR, we must have a valid reason to use your personal information. These lawful bases include:

• Contractual Necessity: Most of the data we collect is necessary to fulfil our contractual obligations to process and deliver your flower order.
• Legal Compliance: We may process personal information to comply with laws, such as record-keeping for tax purposes.
• Legitimate Interest: We may process your data for uses such as improving our website, ensuring security, and responding to queries, when these interests do not override your data protection rights.
• Consent: For certain purposes, such as sending marketing communications, we will ask for your explicit consent, and you may withdraw it at any time.

How We Use Your Data

Your personal data is used in the following ways:

• To process and fulfil your flower delivery order, and communicate order updates.
• To deliver flowers and gifts to the designated recipients.
• To respond to your inquiries, feedback, or requests for information.
• To process payments and prevent fraudulent transactions.
• To maintain our business records and comply with legal obligations.
• To analyse and improve our services, website performance, and customer experience.
• With your permission, to send you marketing offers and newsletters.

How We Store and Protect Your Data

Your privacy and security are paramount to us. Personal data is securely stored in password-protected systems and databases, with access granted only to authorised personnel. We use appropriate technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction. Our website may also utilise encryption and other security features to safeguard data transfers.

How Long We Keep Your Information (Retention Policy)

We retain your personal information only for as long as needed for the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. Generally:

• If you have placed an order with us, we will retain your data for up to seven years to meet our tax and record-keeping obligations.
• Contact information used for marketing purposes will be retained until you unsubscribe or withdraw consent.
• Technical and analytical data is retained for no longer than is necessary for business and operational purposes.

Once the relevant retention period has expired, your personal data will be deleted or anonymised.

Third Party Processors

We may use third-party service providers (data processors) to assist us in delivering our services. These can include:

• Payment processors for handling secure financial transactions (who do not have access to your full card details).
• Delivery and courier partners to ensure your order arrives at the correct destination.
• IT and website hosting providers who support the technical infrastructure of our business.
• Providers of customer service or marketing tools (where consent has been given).

When working with third parties, we ensure they are GDPR-compliant and that any data sharing is governed by strict contractual arrangements to protect your information.

Your Data Protection Rights

As a data subject under the GDPR, you have several rights regarding the personal data we hold about you:

• The right to access: You are entitled to request a copy of the personal data we hold about you.
• The right to rectification: You can request corrections to any inaccurate or incomplete data.
• The right to erasure: You may ask us to delete your personal information in certain circumstances.
• The right to restrict processing: You can request limits on how we use your data.
• The right to object: You have the right to object to processing, particularly for direct marketing.
• The right to data portability: You can ask for your personal data to be provided to you, or a third party, in a commonly used format.

To exercise any of these rights or to make a data protection enquiry or complaint, please contact us using the details provided on our website or in your order confirmation correspondence. We may need to verify your identity before processing your request and respond within one month as required by law.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page and, where appropriate, notified to you via the contact information we hold. We encourage you to check this page regularly to remain informed about how we protect your data.

Contact Us

If you have any questions or requests related to this Privacy Policy or how we use your personal information, please use the contact forms or details provided on our website. We are committed to handling your data responsibly and welcome any feedback on how we could improve our data practices.