Flower Delivery Eltham Privacy Policy

Introduction

Flower Delivery Eltham is dedicated to respecting your privacy and safeguarding your personal information. This Privacy Policy describes how we collect, use, store, and protect your personal data when you place orders with us. This policy applies to all customers who make use of our flower delivery services from Eltham and surrounding districts.

What Data We Collect

We collect and process personal information necessary to process your orders, deliver flowers, and provide customer support. The data collected may include:

• Full name
• Contact details (address, phone number, and other delivery information)
• Email address
• Order history and purchase details
• Payment information (processed securely by third-party payment processors; we do not store card details)
• Recipient details, where provided (e.g., name, delivery address, and message card)
• Device and browsing information (such as IP address, browser type, and cookies) where you use our website

Lawful Basis for Processing

Our lawful bases for collecting and processing your personal data under the UK General Data Protection Regulation (GDPR) are:

• Contractual necessity: Processing your personal details is necessary to fulfil your order, arrange delivery, and provide the services you request.
• Legitimate interests: We may process personal data for our legitimate business interests, such as improving our services, ensuring secure transactions, or sending service-related communications (e.g., order confirmation).
• Legal obligation: We may retain certain information to comply with tax, accounting, or other legal obligations.
• Consent: Where required (for example, for marketing emails), we will obtain your explicit consent before processing your data.

How We Use Your Information

We use personal data for the following purposes:

• Processing and fulfilling your flower delivery orders
• Contacting you about your order and providing customer service
• Delivering flowers to you or your recipients
• Managing and improving our website and services
• Sending service-related notifications, such as order confirmations or delivery updates
• Fulfilling legal and regulatory obligations
• With your explicit consent, sending marketing communications (which you can opt out of at any time)

How We Share and Store Your Data

Your data is stored securely and is only accessible to authorised staff or approved service providers. We do not sell or rent your data to third parties. However, your data may be shared with:

• Trusted third-party service providers or processors (e.g., payment processing, order fulfilment, IT support) who assist in delivering our services
• Delivery partners who require information to complete your order
• Regulatory or public authorities when legally obligated

All third-party providers who process data on our behalf are contractually obliged to handle your information in accordance with data protection law and to use it solely for the purpose for which it was provided.

How Long We Keep Your Data

Your personal data is retained only as long as necessary for the purposes outlined in this policy or as required to comply with legal obligations. Generally, order and transaction information is retained for up to seven years in accordance with accounting and tax regulations. Contact details provided for marketing will be retained until you withdraw your consent or unsubscribe. Once your data is no longer required, it will be securely deleted or anonymised.

Data Processors and International Transfers

To provide our flower delivery service, we use third-party processors, such as payment providers or couriers, who may process your data on our behalf. Where it is necessary to transfer data outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are in place to protect your information, such as use of Standard Contractual Clauses or ensuring processors are certified under relevant data protection schemes.

Security Measures

We take the security of your personal data seriously. Technical and organisational measures are in place to safeguard your information against unauthorised access, loss, or misuse. These include secure physical facilities, encrypted data transfer, password-protected systems, and staff training on data protection requirements.

Your Rights as a Data Subject

Under the GDPR, you have a number of rights regarding your personal data, including:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to erasure ("right to be forgotten"): You can request deletion of your personal data, subject to legal exceptions.
• Right to restrict processing: You can request that we limit processing of your data in certain circumstances.
• Right to data portability: You can request that we transfer your personal data to another service provider where technically feasible.
• Right to object: You may object to processing based on legitimate interests or direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided on our website. We aim to respond to all requests within one month, subject to legal considerations.

Policy Updates

Our Privacy Policy may be updated from time to time to reflect changes in our business processes or legal requirements. Please review this page periodically for the latest information. Significant changes will be highlighted where appropriate.

Contact and Complaints

If you have questions, requests, or concerns regarding your personal data or this privacy policy, please contact us via the contact information provided on our website. If you are not satisfied with the response, you have the right to lodge a complaint with the relevant data protection supervisory authority.

This policy is effective as of 10 June 2024 and applies to all flower delivery orders placed by customers in Eltham and surrounding districts.