Privacy Policy for Flower Delivery South Ruislip Customers

Introduction

At Flower Delivery South Ruislip, we are dedicated to respecting and protecting the privacy of our customers. This Privacy Policy outlines how we collect, use, store, and process your personal data in compliance with the UK General Data Protection Regulation (GDPR) and other relevant data protection laws. This policy applies to all customers who place orders with Flower Delivery South Ruislip, whether residing in South Ruislip or the surrounding districts.

What Personal Data Do We Collect?

We collect and process a range of personal data necessary for fulfilling your flower delivery orders and providing you with our services. The types of data we may collect include:

• Contact Information: such as your full name, delivery address, billing address, and telephone number.
• Order Details: including order history, delivery instructions, type of flowers or arrangements requested, and any special messages for recipients.
• Payment Information: card details or payment references processed via secure third-party payment processors. We do not store your full card information on our systems.
• Communication Records: emails or correspondence regarding your orders or enquiries, including feedback and complaints.
• Website Usage Data: IP address, browser type, and usage statistics if you interact with our website or online platforms.

Lawful Basis for Processing Personal Data

We process your personal data on the following lawful bases as set out under Article 6 of the UK GDPR:

• Contractual Necessity: Processing is required to fulfil our contract with you when you place an order for flower delivery services.
• Legal Obligation: Certain information, such as transaction records, is retained to comply with legal and accounting requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including improving our services, preventing fraud, and maintaining security, provided such interests are not overridden by your privacy rights.
• Consent: Where required, such as for marketing communications, we will only process your data with your explicit consent. You may withdraw this consent at any time by contacting us.

How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing and delivering your flower orders, including handling payments and arranging deliveries.
• Communicating with you regarding your orders, queries, feedback, or complaints.
• Improving our products, services, and customer experience.
• Fulfilling our legal and regulatory obligations.
• With your consent, providing you with information about our offers, promotions, or events.

Data Retention

We only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The general retention periods are:

• Order and Transaction Records: Kept for up to 6 years to comply with accounting and tax obligations.
• Contact and Communication Data: Retained for up to 2 years after your last interaction with us unless you request deletion sooner and it is permitted by law.
• Marketing Data: Where you have consented to receive marketing, we will retain your contact data until you withdraw your consent.

Upon expiry of these periods, relevant data will be securely deleted or anonymised.

Third-Party Data Processors

We use reputable third-party service providers (data processors) to help deliver our services, such as payment processors, courier companies for deliveries, IT systems providers, and professional advisers. These processors are contractually required to process your data only on our instructions, keep it secure, and comply with data protection laws.

When necessary, we may share personal data with regulators and authorities if required by law. We do not sell or rent your personal information to third parties for marketing purposes.

Your Data Protection Rights

Under the UK GDPR, you have a number of rights in relation to your personal data, including:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: In certain circumstances, you can request deletion of your data, such as when it is no longer required or you withdraw consent.
• Right to Restriction: You may ask us to restrict the processing of your personal data in some situations.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format and transfer it to another provider.
• Right to Object: You can object to the processing of your data on grounds relating to your particular situation or where we process data for direct marketing purposes.

If you wish to exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to all valid requests within one month.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. This includes physical and electronic safeguards, staff training, and regular review of our security procedures. While we take these steps to protect your data, no system can guarantee complete security; however, we continually work to improve and adapt our security measures.

International Data Transfers

We generally store and process your data within the UK or the European Economic Area. If it is necessary to transfer your data outside these jurisdictions, we will ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data in compliance with applicable law.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available to our customers. We encourage you to review this policy regularly to stay informed about how we protect your information.

How to Contact Us

If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, or if you wish to exercise your data protection rights, please reach out to our customer service team. We are committed to working with you to address any concerns and ensure your data rights are respected.