Privacy Policy for Flower Delivery Yiewsley Customers

Privacy Policy Overview

This Privacy Policy describes how Flower Delivery Yiewsley ('we', 'us', or 'our') handles your personal data when you place an order with us from Yiewsley and the surrounding districts. We are committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ('GDPR') and all relevant data protection laws.

Scope of this Policy

This Privacy Policy applies to all customers who order flower delivery services from Flower Delivery Yiewsley, whether online, by phone, or in-store, and who reside in or request deliveries to Yiewsley and the surrounding districts. By placing an order, you acknowledge and agree to the terms of this policy.

Personal Data We Collect

We collect various types of personal data to process your orders and provide quality floral delivery services. The categories of data collected may include:

  • Contact Information: Name, delivery address, billing address, telephone number.
  • Order Information: Order details, purchase history, delivery instructions.
  • Payment Information: Payment card details or transaction information (note: card details are securely processed and never stored in full on our servers).
  • Recipient Information: If you are sending flowers to someone else, we also collect the recipient’s name, address, and contact number solely for delivery purposes.
  • Communication Data: Correspondence with our customer support, feedback, complaints, and queries.
  • Technical Data: IP address, device type, browser type, information collected via cookies or similar technologies (for users browsing our website).

Lawful Basis for Processing

We process your personal data based on one or more of the following lawful bases:

  • Contractual Necessity: Processing is required to fulfill your order, take payment, and complete delivery.
  • Legitimate Interests: To improve our services, defend our legal rights, prevent fraud, and ensure the security of our operations.
  • Legal Obligation: We may process certain data to comply with legal and fiscal requirements, such as record-keeping for tax purposes.
  • Consent: We may ask for your consent for specific uses (e.g., direct marketing) if required by law. You can withdraw your consent at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

  • Processing and delivering your flower orders
  • Communicating with you regarding your order or to address your enquiries
  • Managing payments and refunds
  • Improving our website and customer experience
  • Meeting our accounting, tax, and legal obligations
  • Preventing and detecting fraud or misuse of our services

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying legal, accounting, or reporting requirements. Generally, order and transaction records are kept for up to six years in line with legal and financial best practices. Contact information used for marketing purposes is only retained for as long as you have not opted out.

Data Processors and Sharing Your Data

We may share your personal data with trusted third-party service providers acting as processors on our behalf, such as:

  • Payment processing companies
  • Delivery and logistics partners
  • IT service providers for our booking and order management systems
  • Professional advisors (such as accountants and legal consultants)

All our processors are contractually obligated to handle your data securely and only for the specified service requirements. We do not sell or rent your personal data to third parties for marketing purposes.

Where required by law, we may also share personal data with regulatory or government authorities.

International Data Transfers

Your data is normally processed within the UK or European Economic Area (EEA). If any data transfer occurs outside the EEA, it is done in compliance with GDPR requirements ensuring an adequate level of protection for your personal data.

Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of your personal data that we hold.
  • Right to Rectification: You can ask us to correct incomplete or inaccurate data.
  • Right to Erasure: You can request deletion of your personal data in certain circumstances.
  • Right to Restrict Processing: You can ask us to restrict the processing of your data in certain cases.
  • Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
  • Right to Object: You can object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where you have given consent, you can withdraw it at any time.
  • Right to Lodge a Complaint: If you are concerned about how we process your data, you have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner's Office (ICO) in the UK.

To exercise your rights, please contact us using the details provided on our website or via your order confirmation documentation. We will respond to your request in accordance with legal timeframes.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. This may include secure servers, encrypted payment systems, and controlled access to personal data within our company.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review this policy periodically to stay informed about how we process and protect your information.

Contact & Further Information

If you have any questions or concerns about this Privacy Policy or how Flower Delivery Yiewsley processes your data, please use the contact information available on our website or in your order confirmation documents. You may also contact us to exercise your data protection rights.

This Privacy Policy is effective as of 1 June 2024 and applies to all customer transactions in Yiewsley and surrounding districts thereafter.