Privacy Policy for Flower Delivery Eastcote Customers

Introduction

This Privacy Policy outlines how Flower Delivery Eastcote ("we", "us" or "our") collects, processes, stores, and protects your personal information when you place an order for flower delivery in Eastcote and surrounding districts. Our commitment is to process your personal data transparently and in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers using our flower delivery services in Eastcote and adjacent towns.

What Data We Collect

When you use our service, we collect various types of information to fulfill your order, improve our services, and meet our legal obligations. The information includes:

• Identity Data: First and last name
• Contact Data: Delivery address, billing address, and telephone number
• Order Data: Details about flowers or products ordered, order history, and delivery instructions
• Payment Data: Card details or payment references (processed through secure third-party payment providers)
• Correspondence: Enquiries, feedback, or complaints you send to us
• Technical Data: IP address, browser type and version, and device information (collected via cookies, where applicable)

Lawful Basis for Processing Your Data

We only collect and use your personal data where permitted by law. The main lawful grounds for processing your personal information are:

• Contractual Necessity: To process and fulfil your order, including delivery and customer service
• Consent: When you have opted in to receive marketing materials (you may withdraw consent at any time)
• Legal Obligation: To comply with legal or regulatory obligations, such as tax and record-keeping requirements
• Legitimate Interests: For business management, analysis, and fraud prevention, provided our interests are not overridden by your rights

How We Use Your Information

Your information is used for the following purposes:

• To process and deliver your flower orders efficiently to the correct recipient
• To manage payments, refunds, and billing
• To communicate order updates, confirmations, or issues relating to your order
• To handle and resolve complaints or service issues
• To improve our website, customer experience, and service offerings
• Where permitted, to send you news, special offers, or information about similar products and services (unless you opt out)

Disclosure to Third-Party Processors

We may share your personal data with trusted third parties who help us to provide our services. These include:

• Payment processors who securely handle your payment details
• Delivery partners responsible for fulfilling and delivering your orders
• IT and system administration service providers
• Professional advisors (accountants, auditors) and legal authorities, if legally required

Each third party is carefully selected and contractually obligated to process your information only as necessary and to maintain its confidentiality.

International Data Transfers

Your data is primarily processed within the United Kingdom or European Economic Area (EEA). If there is any transfer of your personal data outside the EEA, we ensure appropriate safeguards are in place to protect your privacy, such as approved standard contractual clauses or equivalent protection mechanisms.

Data Retention

We will retain your personal information only as long as required for the purposes stated above. Generally, customer and order information is retained for up to seven years to comply with legal accounting and tax obligations. Information used for marketing will be kept until you withdraw your consent or unsubscribe, whichever occurs first. After the retention period, data is securely deleted or anonymized.

How We Protect Your Data

Your privacy and the security of your personal data are important to us. We use technical and organizational measures to prevent loss, misuse, unauthorized access, disclosure, or alteration. These include secure server environments, encryption, password protection, and access controls for personnel.

Your Rights Under GDPR

You have several rights concerning your personal information under the GDPR, including:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your data where lawful and relevant.
• Right to Restriction: You can request limited processing of your personal information under specified conditions.
• Right to Data Portability: You can request your information in a structured, commonly used, machine-readable format and have it transmitted to another data controller, where technically feasible.
• Right to Object: You can object to certain processing activities, including direct marketing.
• Right to Withdraw Consent: Where we rely on your consent for data processing, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to your withdrawal.

To exercise any of these rights, please contact us through our standard channels. We will respond within one month, subject to verification of your identity and the request’s nature.

Children’s Privacy

Our flower delivery services are not intended for children under 16. We do not knowingly collect personal information from children under the age of 16. If we become aware that such information has been inadvertently collected, we will promptly take steps to delete it.

Changes to This Privacy Policy

We reserve the right to update or change this Privacy Policy at any time in order to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this policy periodically. Substantial changes will be communicated clearly where required by law.

Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about your personal data, you may contact us through the methods provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office or the supervisory authority in your country of residence.