Privacy Policy for Flower Delivery West Heath Customers

Introduction

This Privacy Policy applies to all customers placing orders with Flower Delivery West Heath, including residents and businesses located in West Heath and surrounding districts. It outlines how we collect, use, store, and share your personal information in compliance with the General Data Protection Regulation (GDPR). Please review this policy to understand your rights and how your data is protected whenever you interact with our services, including placing orders, submitting inquiries, or contacting our customer service.

What Data We Collect

Flower Delivery West Heath collects and processes a range of personal data to provide you with high-quality and reliable floral delivery services. Data may be collected directly from you when you place an order, interact with our website, or communicate with our team. The types of personal data we may collect include:

  • Contact Information: Full name, delivery address, billing address, telephone number, and any alternative contact details you provide.
  • Order Details: Products ordered, recipient name and address, special delivery instructions, and any personal messages included with your order.
  • Payment Information: Payment card details or other payment method details required to process your transaction. Payment processing is managed securely via our payment processing partners; we do not retain full card details.
  • Correspondence: Records of your communications with our customer service, including inquiries, requests, complaints, and feedback.
  • Technical Data: Information about your device and interaction with our website, such as IP address, browser type, date and time of visits, and cookie data (where applicable).

Lawful Basis for Processing

We only process your personal data when we have a lawful basis under the GDPR. The lawful bases that apply to Flower Delivery West Heath include:

  • Contractual Necessity: Processing your data is required to fulfil your flower delivery order, including arranging delivery, processing payment, contacting you about your order, and responding to your queries.
  • Legal Obligations: To comply with applicable legal requirements, such as record-keeping for tax or accounting purposes or fraud prevention.
  • Legitimate Interests: We may use your information for legitimate business interests (provided your rights do not override these), such as improving our services, quality control, staff training, or communicating limited service updates.
  • Consent: Where applicable, such as for marketing materials, we will request your explicit consent prior to sending. You can withdraw consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

  • Processing and fulfilling your orders, including arranging delivery to the specified recipient.
  • Processing payment and verifying transactions through secure payment processors.
  • Communicating with you regarding your orders, service updates, or responding to your inquiries.
  • Improving the quality and efficiency of our customer service and operations.
  • Maintaining and securing our website and digital services.
  • Meeting legal and regulatory requirements.

How Long We Retain Your Data

Flower Delivery West Heath retains your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Typically, we retain data related to orders for up to six years to comply with legal and accounting requirements. Where personal data is no longer required (for example, if you have not placed an order for several years and there is no legal need to retain your data), it will be securely deleted or anonymized.

Third-Party Data Processors

To support our business operations, Flower Delivery West Heath engages trusted third-party providers who act as data processors. These entities process your personal data on our behalf and under our instructions. Examples of third-party processors include:

  • Payment processors: To securely handle and process transactions.
  • Delivery partners: For fulfilling and tracking flower deliveries.
  • IT and website service providers: Who manage, host, or provide technical support for our website and digital services.

We require all third-party processors to adhere to strict data protection and confidentiality standards in accordance with GDPR requirements. They are only permitted to process your data for specified purposes, and they may not use your data for their own marketing or unrelated purposes.

International Transfers

As a general rule, your data is stored and processed within the United Kingdom and the European Economic Area (EEA). If we need to transfer your information outside these regions (for example, if our IT service provider operates internationally), we will ensure that appropriate safeguards are in place to protect your data in line with GDPR standards, such as reliance on adequacy decisions or standard data protection clauses approved by the European Commission.

Your Rights Under GDPR

As a customer located in West Heath and its surrounding districts, you are entitled to the full range of rights outlined in the GDPR, including:

  • Right of Access: You can request confirmation of whether we process your personal data and, if so, obtain a copy of this data and other supplementary information.
  • Right to Rectification: You can request correction of inaccurate or incomplete personal data we hold about you.
  • Right to Erasure: In some circumstances, you may ask us to delete your data, provided there is no overriding legal requirement to retain it.
  • Right to Restrict Processing: You may request we temporarily restrict processing of your data in certain situations.
  • Right to Data Portability: You can receive your data in a structured, commonly used, and machine-readable format or have it transferred directly to another data controller.
  • Right to Object: You may object to processing of your data for certain purposes, such as direct marketing or based on legitimate interests.
  • Rights Regarding Automated Decision-making: You have rights related to any automated decisions, including profiling, that may affect you.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw this at any time without affecting prior processing.

To exercise these rights, please contact us using the details provided on our website or order confirmation documents.

Changes to This Policy

This Privacy Policy may be periodically updated to reflect changes in our practices or legal obligations. We will notify you of any significant changes where required. The updated version will always be available on our website.

Contact and Complaints

If you have questions or concerns regarding this Privacy Policy or the use of your personal data, please contact Flower Delivery West Heath using the details provided on our website or on your order confirmation. If you believe we have failed to address your concerns or comply with GDPR, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.