Flower Delivery Highams Park Privacy Policy

Scope of This Privacy Policy

This Privacy Policy sets out how Flower Delivery Highams Park ("we", "us", "our") collects, processes, stores, and protects personal data relating to customers who place flower delivery orders in Highams Park and the surrounding districts. This policy applies to all users accessing our services within these areas.

Personal Data We Collect

We collect and process different types of personal data, depending on how you interact with us and which services you use. The following categories of data may be collected when you place an order or contact us:

• Identity Data: Full name, contact details, and delivery addresses (including recipient's name and address if different).
• Contact Data: Phone number (optional), billing address, and correspondence details (e.g., information you provide when contacting customer service).
• Transaction Data: Order details, delivery instructions, transaction history, payment method (note: we do not store your complete payment card details).
• Technical Data: IP address, device type, browser type, and related log information when you use our website (collected via cookies and similar technologies).
• Marketing Preferences: Preferences related to receiving marketing and promotional offers, if you choose to opt in.

Lawful Basis for Processing Your Data

Under the UK General Data Protection Regulation (GDPR), we must have a valid reason (lawful basis) for using your personal data. We process your data under one or more of the following lawful bases:

• Contractual necessity: To process and deliver your flower order, fulfil the contract between you and us, process payments, and communicate order status.
• Legal obligation: To comply with applicable laws, such as tax or accounting requirements.
• Legitimate interests: To improve our products and services, perform fraud checks, maintain security, and provide customer support, provided these do not override your privacy rights.
• Consent: Where you provide your explicit consent, such as for receiving marketing communications. You can withdraw your consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

• To process and fulfil your flower delivery orders, including handling payment and coordinating delivery.
• To communicate with you about your order status or respond to your queries or complaints.
• To maintain records for accounting, auditing, and regulatory compliance.
• To improve our products, services, and customer experience.
• To personalise your shopping experience, subject to your settings and preferences.
• To send relevant marketing and promotional information, where you have provided your explicit consent.
• To detect, investigate, and help prevent fraud or other prohibited activities.

Data Retention

We retain your data only for as long as it is necessary for the purposes described above, in accordance with our legal obligations and legitimate business needs. For example, order and transaction data is typically retained for up to seven years to satisfy tax or legal reporting requirements. Where your data is kept solely based on your consent (e.g., marketing), we will delete it promptly if you withdraw your consent.

Processors and Data Sharing

We engage with third-party processors to assist in delivering our services and fulfilling your orders. These may include payment gateways, IT support providers, delivery partners, and cloud storage services. All third parties are carefully selected to ensure they meet GDPR standards and are contractually obliged to use your data only as instructed by us. We do not sell or lease your personal data to third parties for marketing purposes.

In certain circumstances, we may share your data with law enforcement agencies or regulators if required by law. Any third-party recipients are only given access to the information necessary to perform their contractually agreed service.

Security of Your Data

We have implemented appropriate technical and organisational measures to safeguard your personal data, including encryption, access controls, and regular security audits. Only authorised employees and processors have access to your data, and only for legitimate business purposes.

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data. You may exercise these rights subject to legal and practical obligations, and we are committed to enabling your rights. Your rights include:

• Right to access: You may request details about the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: Also known as the "right to be forgotten." You may request deletion of your personal data in certain circumstances.
• Right to restriction: You may ask us to limit the processing of your data where you have reason to do so.
• Right to data portability: You may request a portable copy of your data for use elsewhere.
• Right to object: You have the right to object to certain types of processing, such as direct marketing.
• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of your rights, please contact us using the details provided at the end of this policy. We aim to respond to all legitimate requests within one calendar month.

International Transfers

Your data is stored primarily within the United Kingdom or European Economic Area. If we need to transfer data outside these regions, we ensure appropriate safeguards are in place as required by GDPR.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in law, regulation, or our practices. The latest version will always be available to you, and material changes will be notified prominently where appropriate.

Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, you are encouraged to contact us using the methods available on our website. We take your privacy seriously and will endeavour to assist you promptly and transparently.