Privacy Policy for Flower Delivery Wealdstone Customers

Introduction

This Privacy Policy explains how Flower Delivery Wealdstone collects, processes, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with Flower Delivery Wealdstone within Wealdstone and its surrounding districts. Ensuring the privacy, integrity, and security of your personal information is of utmost importance to us. This policy outlines what data we collect, our lawful bases for processing, data retention, use of data processors, and your rights regarding your information.

What Information We Collect

When you place an order for flower delivery with Flower Delivery Wealdstone, we collect the following types of personal information:

• Contact Details: Name, delivery address, phone number of the sender and recipient, and any alternative contact information provided.
• Order Information: Details about your order, including product selections, delivery instructions, and card messages.
• Payment Information: Information necessary to process payments, such as card details and billing address. Payment details are usually processed directly by our payment service providers and are not stored by us, except for transaction confirmation and fraud prevention data.
• Communication Records: Any correspondence you initiate with us regarding your order, including inquiries, feedback, or complaints.
• Technical Information: Device and usage data when you interact with our website, such as IP address, browser type, and timestamps, collected through cookies and similar technologies.

Lawful Basis for Processing Data

Under GDPR, we must have a valid lawful basis to process your personal information. Depending on the circumstances, we rely on the following legal grounds:

• Contractual Necessity: Processing your data is essential to fulfil your flower delivery order, communicate with you about your order, and handle payment and delivery.
• Legal Obligation: We may process and retain data as required to comply with applicable laws, such as accounting and taxation obligations or as required by law enforcement.
• Legitimate Interests: We may process your information to improve our services, prevent fraud, and ensure the security of our website and business operations. We always carefully balance our interests with your privacy rights.
• Consent: In rare cases where consent is required, for example, for specific types of marketing communication (if offered), we will seek your explicit permission before processing your data in that manner.

Data Retention

Your personal data will only be kept for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, we retain order and delivery information for a period of six years to comply with regulatory requirements. After this period, personal data is securely deleted or anonymized unless a longer retention period is mandated or legally permissible.

Technical data, such as website usage statistics, may be stored for a shorter duration, sufficient only for system monitoring, security, and performance analysis.

Data Processors and Third Parties

To provide our flower delivery services, Flower Delivery Wealdstone may engage trusted third-party processors in accordance with GDPR requirements. These include:

• Payment Service Providers: To securely process your payment transactions.
• Courier and Delivery Partners: For the effective fulfilment and tracking of your order to the specified delivery address.
• IT Service Providers: For website hosting, maintenance, and customer service platforms.
• Professional Advisors: Such as accountants or legal advisors when necessary for business operations or compliance.

All processors operate under written agreements, ensuring that your data is kept secure, confidential, and processed solely as instructed by us. We do not sell, rent, or trade your personal data with any third parties for their direct marketing purposes.

User Rights Under GDPR

As a customer within Wealdstone or its surrounding districts, you benefit from a range of data protection rights under GDPR. These rights include:

• Right of Access: You can request confirmation as to whether your personal data is being processed and obtain a copy of that data.
• Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete information we hold about you.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data where there is no legal reason for us to continue processing it.
• Right to Restriction: You may request restrictions on the processing of your data, for example, if you want us to verify the accuracy or our reasons for processing it.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format for your own use or to transfer to another provider.
• Right to Object: You may object to processing where we rely on legitimate interests, unless we can demonstrate compelling reasons to continue.
• Rights Related to Automated Decision Making: We do not make decisions based solely on automated processing that have significant effects on individuals. Should this change, we will update this policy.

To exercise any of these rights, please contact us through the customer service options provided on our website. We will respond to all legitimate requests within one month, although this period may be extended if the request is particularly complex or numerous. We may request further information to verify your identity for security purposes.

Data Security

We take appropriate physical, technical, and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. Access to your data is limited only to employees, agents, and third parties who require it for the course of providing services to you, all of whom are bound by confidentiality obligations.

Policy Updates

Flower Delivery Wealdstone reserves the right to amend this Privacy Policy from time to time. Updates will be posted on our website, and, where appropriate, we will notify you of significant changes. We recommend reviewing this policy periodically to stay informed about how we protect your personal information.

Contacting Us

If you have any concerns or questions regarding this Privacy Policy or the way Flower Delivery Wealdstone handles your personal data, please contact us using the details provided on our customer service page. If you remain dissatisfied, you have the right to lodge a complaint with the relevant data protection supervisory authority.