Flower Delivery Barkingside Privacy Policy

Scope and Application

This Privacy Policy explains how Flower Delivery Barkingside collects, uses, processes, and protects personal information from customers placing orders for delivery in Barkingside and surrounding districts. We are committed to complying with the EU General Data Protection Regulation (GDPR) and ensuring your data privacy, security, and rights are respected at all times.

What Data We Collect

When you place an order or interact with Flower Delivery Barkingside, we collect and process various types of personal data, which may include:

• Contact Information: such as your name, delivery address, billing address, telephone number, and postcode.
• Order Details: including products chosen, recipient’s name and address, messages to accompany orders, and delivery instructions.
• Payment Information: limited to payment method, transaction amount, and payment status. Payment card data is processed securely by our external payment processor and is not stored on our systems.
• Account Details: if you choose to create an account, such as username and password.
• Communication Records: records of phone calls, order instructions, and customer service interactions.
• Technical Data: such as IP address, browser type, and device identifiers, gathered when you interact with our website for functionality and security.

Lawful Basis for Processing

We process your personal data only when there is a lawful basis to do so under GDPR. These bases include:

• Contractual Necessity: To process and deliver your flower order, communicate order status, handle payments, and provide customer support.
• Legitimate Interests: To prevent fraud, enhance website security, ensure the quality of our services, and improve customer experience.
• Legal Obligations: To comply with applicable laws, such as retaining certain transaction records for accounting and regulatory requirements.
• Consent: For certain optional activities, such as sending promotional communications (when you opt-in), we will ask for your consent, which you can withdraw at any time.

How We Use Your Data

We use your data for the following purposes:

• Fulfilling, processing, and delivering your flower orders.
• Providing customer support and responding to your queries.
• Improving our products and services.
• Sending service-related communications, such as order confirmations and delivery updates.
• Complying with our legal and regulatory obligations.
• Where permitted, sending you marketing materials relating to our services (subject to your consent or opt-out rights).

Data Retention

We retain your personal information only for as long as necessary to fulfill the purpose for which it was collected, to meet legal or regulatory requirements, resolve disputes, and enforce our agreements. The standard data retention periods are as follows:

• Order Data: Retained for up to 7 years from the date of your last purchase for tax, accounting, and regulatory purposes.
• Customer Account Data: Retained for as long as your account remains active or until you request deletion.
• Marketing Preferences: Maintained until you withdraw your consent or opt out.

Once the relevant retention period has expired, your data will be securely erased or anonymised so that it can no longer be linked back to you.

Processors and Data Sharing

We may share your personal data with third-party processors who provide services necessary for order fulfillment and business operations. These may include:

• Payment processors for secure transaction handling.
• Delivery partners and couriers to ensure successful delivery of your order.
• IT and hosting providers to maintain our website and security.
• Customer support platforms supporting communication and service quality.

All processors act on our instructions, are bound by confidentiality obligations, and are required to implement appropriate security measures. Flower Delivery Barkingside does not sell or rent your personal data. Personal data is not transferred outside the European Economic Area (EEA) unless appropriate safeguards are in place, in accordance with GDPR requirements.

How We Protect Your Data

We take data security seriously and maintain appropriate technical and organisational measures to protect your personal information from loss, unauthorised access, misuse, alteration, or disclosure. These include, but are not limited to, data encryption, secure server environments, regular staff training, and strict access controls.

Your Rights Under GDPR

You have several important rights regarding your personal data under the GDPR, including the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request corrections to any inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data where applicable ("right to be forgotten").
• Restriction: Request restriction of processing under specific circumstances.
• Objection: Object to processing based on our legitimate interests or for direct marketing purposes.
• Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and have it transferred to another controller.
• Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

For the exercise of these rights or if you have concerns regarding how your data is handled, please contact us using the channels provided on our website or contact page.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, or our business operations. The date of the most recent update will be indicated at the top of the Policy. We encourage you to review this Policy regularly for the latest information on our privacy practices.

Contact and Further Information

If you have questions or concerns about this Policy or how Flower Delivery Barkingside processes your personal data, please refer to our website’s contact section for the relevant ways to reach us. We are committed to assisting you and will respond to any privacy queries promptly.