Flower Delivery Edgware Privacy Policy
Privacy Policy for Customers Ordering from Flower Delivery Edgware
This Privacy Policy explains how Flower Delivery Edgware collects, uses, stores, and protects your personal data when you place an order with us. It applies to all customers placing orders with Flower Delivery Edgware within Edgware and the surrounding districts. We are committed to respecting and safeguarding your privacy in accordance with the General Data Protection Regulation (GDPR).
1. Data We Collect
When you place an order with Flower Delivery Edgware, we may collect and process the following categories of personal data:
- Contact Details: Name, delivery address, billing address, and telephone number
- Order Information: Order history, chosen floral arrangements, special instructions, delivery date and time
- Payment Details: Payment card information or other payment method data (processed via secure third-party payment providers)
- Communication Data: Any correspondence you have with us regarding your order, feedback, or queries
- Technical Data: IP address, browser type, and information about your use of our website (collected through cookies and similar technologies)
2. Lawful Basis for Processing Personal Data
We process your personal data based on the following lawful bases under GDPR:
- Contractual Necessity: We need to process your data to fulfil your order and deliver our products and services as requested.
- Legitimate Interests: We may process your data to improve our services, manage our business operations, or provide customer support, but only where our interests do not override your fundamental rights and freedoms.
- Legal Obligations: We may be required to process and retain certain information to comply with legal or regulatory duties, such as tax and accounting obligations.
- Consent: In cases where we rely on your consent (e.g., for optional marketing communications), you may withdraw your consent at any time.
3. How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your flower delivery orders
- Contacting you regarding your order status or any issues related to your delivery
- Customer support and resolving queries or complaints
- Processing payments for your orders
- Maintaining internal records of transactions for audit and compliance purposes
- Improving our website, products, and customer experience
- Sending marketing offers and updates, if you have provided express consent
4. Data Retention
We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically, order and transaction data are retained for up to seven years to comply with tax and accounting laws. Communication data may be kept for up to two years from the date of your query or correspondence. If you withdraw consent to marketing, we will promptly remove you from our marketing lists.
5. Sharing and Data Processors
Your personal data may be processed by trusted third parties who assist us in delivering our services. These data processors include:
- Payment Processors: Securely handling your payment information for order transactions;
- IT Service Providers: Hosting our website and managing technical infrastructure;
- Logistics Partners: Assisting with delivery of orders to your chosen address.
We require all our third-party service providers to respect the security of your personal data and to treat it in accordance with the law. Your data is not sold to any third parties for marketing purposes.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. This includes secure website connections, restricted access by staff, encryption of payment data, and regular review of our data protection policies.
7. International Transfers
If any processing of your personal data involves a transfer outside the United Kingdom or the European Economic Area (EEA), we ensure that such transfers are made only where adequate safeguards are in place as required by GDPR, such as Standard Contractual Clauses or an adequacy decision.
8. Your Rights Under GDPR
As a customer of Flower Delivery Edgware, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data where there is no lawful reason for us to retain it
- Right to Restrict Processing: Request restriction of processing in certain circumstances
- Right to Object: Object to processing based on our legitimate interests or for direct marketing
- Right to Data Portability: Request transfer of your data to you or another provider in a structured, commonly used, machine-readable format
- Right to Withdraw Consent: Withdraw your consent at any time (where processing is based on consent)
- Right to Lodge a Complaint: Complain to a relevant supervisory authority if you believe your data protection rights have been breached
9. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business or legal requirements from time to time. Any significant updates will be made available on our website, and we encourage customers to review this policy periodically.
10. Contacting Us
If you have any queries regarding this Privacy Policy or how your data is processed by Flower Delivery Edgware, please contact us through the online enquiry form on our website.