Flower Delivery Streatham Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Streatham collects, uses, stores, and protects the personal information of customers who place orders from Streatham and surrounding districts. We respect your privacy and are committed to complying with the UK General Data Protection Regulation (UK GDPR) and related data protection laws. Please read this policy carefully to understand how we manage your personal information and what your rights are.

Scope of Policy

This Privacy Policy applies to all customers, whether individuals or corporate customers, who place flower delivery orders with Flower Delivery Streatham for delivery within Streatham and adjacent areas. By placing an order, you accept the terms described in this policy regarding how your data is collected and used.

Data We Collect

We collect the following types of personal data when you place an order or interact with our services:

• Contact Information: Name, delivery address, billing address, telephone numbers (where provided), and contact details of the recipient (if different from you).
• Order Information: Details of flowers or products ordered, delivery instructions, messages to recipients, order history, and payment amount.
• Payment Information: Card details and other payment information (processed securely through third-party payment providers).
• Correspondence: Any communications with us, including queries, feedback, and complaints.
• Technical Data: IP address, browser type, device identifiers, and information about your use of our website through cookies and similar technologies.

Lawful Basis for Processing Your Personal Data

We process your personal data according to one or more of the lawful bases permitted under the GDPR:

• Contractual Necessity: To fulfil our contractual obligations to you, such as processing your order, arranging delivery, and providing customer support.
• Legal Obligation: To comply with legal requirements, such as record-keeping for tax purposes and fulfilling legal requests from authorities.
• Legitimate Interests: For legitimate business purposes, including improving our services, managing our relationship with you, and ensuring the security of our operations.
• Consent: Where required, we will seek your consent, e.g., for marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Your data is used for the following purposes:

• Processing and fulfilling your orders, including delivery and customer support
• Processing payments through secure payment providers
• Communicating with you about your order or responding to your requests
• Managing returns, refunds, and complaints
• Maintaining business records and complying with legal requirements
• Improving our services and website based on customer feedback and usage data
• Sending marketing communications where you have consented

Data Retention

We only retain your personal data for as long as is necessary for the purposes for which it was collected:

• Orders and Invoices: Personal and order data are retained for up to seven years to comply with legal and tax obligations.
• Enquiries and Customer Support: Communication records are kept for up to two years after resolution of your enquiry.
• Marketing: If you have opted in to receive marketing communications, we will retain your contact details until you opt out or withdraw consent.
• Cookies and Analytics: Data collected through cookies is retained according to our cookie management settings, typically up to two years.

After these periods, your personal data will be securely deleted or anonymised.

Data Processors and Third Parties

To provide our services effectively, we work with carefully selected third party service providers (data processors), which may include:

• Payment processors (for secure card payments)
• IT service providers (hosting, data storage, and customer relationship management tools)
• Delivery and logistics partners (for delivery of flowers and related products)
• Professional advisers (such as accountants and legal advisors)
• Website analytics and cookie management services

All processors act on our instructions and are required to handle your information responsibly and in accordance with data protection law. We do not share your personal data with third parties for their own purposes without your consent, except as required by law.

Data Security

We implement appropriate technical and organisational measures to safeguard your personal data from unauthorised access, alteration, disclosure, or destruction. This includes secure data storage, encryption where appropriate, access controls, and regular review of our security practices.

International Data Transfers

Your personal data is normally processed and stored within the United Kingdom or the European Economic Area (EEA). Where service providers are located outside these regions, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Your Rights Under GDPR

Under the UK GDPR, you have the following rights concerning your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no lawful basis to retain it.
• Right to Restrict Processing: Request the restriction of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format and, where feasible, have it transmitted to another controller.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time.
• Right to Complain: Lodge a complaint with the UK Information Commissioner's Office if you have concerns about how your data is handled.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The latest version will always be available on our website. We encourage you to review this policy regularly.

Contact and Further Information

If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, please contact us using the details provided on our website. We are committed to resolving your data protection concerns promptly and transparently.