Flower Delivery West Norwood Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery West Norwood ("we", "us", "our") collects, uses, and protects your personal data when you place orders with us in West Norwood and the surrounding districts. We respect your privacy and handle your information in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. By placing an order with Flower Delivery West Norwood, you acknowledge and agree to the practices described in this policy.

Scope of the Policy

This Privacy Policy applies to all customers placing Flower Delivery West Norwood orders from West Norwood and surrounding districts, whether through our website, over the phone, or via other permitted channels. It outlines what data we collect, the legal grounds for processing, how long we retain information, our use of third-party processors, and your rights regarding your personal information.

What Data We Collect

When you interact with Flower Delivery West Norwood, we may collect the following categories of personal data:

• Identity Data: Full name and, where applicable, proof of identity.
• Contact Data: Billing/relevant delivery address, telephone number(s), and other contact information.
• Order Details: Information about your orders, such as recipient name and address, product selections, delivery preferences, and order history.
• Payment Data: Payment method information (such as card type and the last four digits, processed through secure payment processors; we do not store complete card details).
• Communications Data: Any correspondence you have with us, including order queries and feedback.
• Technical Data: IP address, browser type, device identifier, and other standard information collected automatically if you use our online services.

We may also collect information from third parties, such as payment processors or delivery agents, as necessary to complete your order.

The Lawful Basis for Processing Your Data

Under GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following lawful bases:

• Contractual Necessity: Most of the data we collect is necessary to fulfil our contract with you. This includes processing your orders, delivering products, and managing payments.
• Legal Obligation: We may process your data where required by law, such as tax and accounting records.
• Legitimate Interest: We may use your data for purposes such as improving our services, preventing fraud, or contacting you about important service updates, provided our interests do not override your fundamental rights.
• Consent: For specific activities, such as marketing communications, we will ask for your explicit consent and you have the right to withdraw your consent at any time.

How We Use Your Data

Your data is used exclusively for purposes directly related to your engagement with Flower Delivery West Norwood, including:

• Processing and delivering your flower orders
• Notifying you of order status, updates, or delivery issues
• Managing payments, refunds, and resolving payment-related matters
• Customer support and responding to enquiries
• Quality assurance, analytics, and service improvement
• Meeting legal, tax, and accounting obligations
• Sending marketing communications (only if you opt-in)

Retention of Your Data

We retain your personal data only as long as necessary for the purposes for which it was collected, including for legal, accounting, or reporting requirements. Typical retention periods are:

• Orders and transactional data: Retained for up to 7 years to comply with UK tax and accounting regulations.
• Marketing data: Retained until you withdraw your consent or unsubscribe from marketing communications.
• Customer service correspondence: Retained for a reasonable period after the closure of an enquiry or complaint to ensure satisfactory resolution.

Once your data is no longer required, it is securely deleted or anonymised.

Use of Processors and Sharing Your Data

Flower Delivery West Norwood may engage third-party service providers ("processors") to assist with certain aspects of order fulfilment and business operations. These may include:

• Payment processors to handle secure transactions
• Delivery partners who ensure your flowers reach their destination
• IT and hosting companies supporting our website and communications infrastructure
• Accountants and consultants for legal or regulatory compliance

All such processors are contractually required to process your data in accordance with GDPR and only as instructed by us. We do not sell or share your data for unrelated third-party marketing purposes.

Your Rights under GDPR

As a data subject under GDPR, you have a number of important rights with respect to your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right of Rectification: You may ask us to correct any inaccurate or incomplete data we hold.
• Right to Erasure: In certain circumstances, you may request the deletion of your data.
• Right to Restrict Processing: You can request that we stop processing your data in certain situations.
• Right to Data Portability: You may request a transfer of your data to another service provider.
• Right to Object: You can object to processing where we rely on legitimate interests or for direct marketing.
• Right to Withdraw Consent: If we process your data with your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the contact details provided on our website or through our customer support channels.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Access to your information is restricted only to those employees, contractors, and processors who need it to provide our services. We regularly review our security practices to safeguard your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated to you through our website or by other appropriate means. Your continued use of our services following any changes indicates your acceptance of the updated policy.

Contact and Complaints

If you have any questions about this Privacy Policy, the way your data is handled, or if you wish to make a complaint, you are encouraged to reach out to us via our established customer support channels. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s data protection authority, if you believe your rights have been infringed.

This Privacy Policy was last updated on 6 June 2024.