Flower Delivery West Green Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery West Green collects, uses, stores, and protects personal data from customers who place flower delivery orders from West Green and the surrounding districts. We are committed to safeguarding your privacy and handling your information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (GDPR).

Scope of This Policy

This policy applies to all individuals who order flower delivery services from Flower Delivery West Green and covers the processing of personal data related to those orders. By using our services, you acknowledge the collection and processing of your personal information as outlined below.

What Data We Collect

We collect the following types of data as necessary for providing our flower delivery services:

• Identification Data: Name, delivery address, and contact details (such as phone number, where provided)
• Order Information: Details of the products or services you order, delivery instructions, and payment confirmation data (note: card details are processed securely by our payment processors and are not stored by us)
• Communication Data: Correspondence you send to us, including inquiries, feedback, or complaints related to your order
• Technical Data: IP address, browser type, device type, time and date of visits, and cookies necessary for the operation of our website

Lawful Basis for Processing Your Data

Under the GDPR, we rely on one or more of the following lawful bases to process your personal information:

• Contractual Necessity: Processing your data is necessary for performing the contract when you order flowers from us, allowing us to deliver your products and handle billing or customer support issues.
• Legal Obligation: We may process your data to comply with legal obligations, including tax and accounting requirements or responding to lawful requests from authorities.
• Legitimate Interests: In some cases, we use your data to maintain the security of our systems, improve our services, prevent fraud, or defend against legal claims. We do so only where our legitimate interests are not overridden by your rights and interests.
• Consent: Where required, we seek your consent to send you marketing communications. You may withdraw your consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• To process and deliver your flower orders, including communicating delivery status and handling any issues
• To manage payments and verify transactions with our trusted payment processors
• To respond to your queries, feedback, or complaints
• To maintain records necessary for business and legal compliance
• To improve our website, products, and services
• Where you have opted in, to send relevant news and special offers applicable to Flower Delivery West Green customers

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Order and Transaction Data: Retained for up to 7 years to comply with accounting and legal requirements.
• Communication Data: Stored for up to 3 years for customer service, training, and legal purposes.
• Marketing Data: If you have consented to receive marketing, your details are retained until you opt out or withdraw consent.
• Technical Data: Retained for up to 24 months for security and analytics.

At the end of these periods, data is securely deleted or anonymized.

Processors and Sharing Your Data

We work with several trusted third-party processors to support the provision of our flower delivery service. These processors may access your data only to the extent necessary to provide their services to us and are contractually obliged to process it securely and in compliance with the GDPR. Examples include:

• Payment processing providers
• Delivery and logistics partners
• IT hosting and support services
• Customer support platforms

We do not sell your personal information to third parties or transfer it outside of the UK or European Economic Area unless adequate safeguards are in place.

Your Rights Under GDPR

You have a number of rights concerning your personal information under the GDPR, including:

• Right to Access: You may request a copy of the information we hold about you.
• Right to Rectification: You have the right to ask us to correct information that is inaccurate or incomplete.
• Right to Erasure ("Right to be Forgotten"): You may ask us to delete your information under certain circumstances.
• Right to Restrict Processing: In some cases, you can ask us to restrict how we use your data.
• Right to Data Portability: You may request that we transfer your data to another service provider, where technically feasible.
• Right to Object: You can object to processing based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where you have given consent, you may withdraw it at any time.

To exercise your rights, please contact us using the methods outlined on our website. We will respond within one month and may need to verify your identity to protect your information.

Security Measures

We take appropriate technical and organizational measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction. These measures include secure access controls, encrypted communications, staff training, and regular review of our data handling processes.

Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in the law, our data processing practices, or new services. Updated versions will be available on our website with the revised date. We encourage you to review the policy regularly.

Contact and Complaints

If you have a question about this Privacy Policy or wish to make a complaint about our handling of your personal data, please contact us using the contact details provided on our website. You also have the right to lodge a complaint with the UK Information Commissioner's Office or your local data protection authority.