Privacy Policy for Customers Ordering from Flower Delivery Harold Hill

Introduction

This Privacy Policy outlines how Flower Delivery Harold Hill (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you place an order with us. This policy applies to all customers ordering from Flower Delivery Harold Hill located in Harold Hill and its surrounding districts. We adhere strictly to the requirements of the UK General Data Protection Regulation (GDPR) and relevant UK data protection laws to ensure your information is protected and respected at all times.

What Data We Collect

When you place an order with Flower Delivery Harold Hill, we may collect and process the following categories of personal data:

  • Identity Data: Your full name and, if applicable, the recipient’s name
  • Contact Data: Delivery address, billing address, postcode, telephone number (if provided), and any relevant delivery instructions
  • Transaction Data: Details of the products you have ordered, order value, payment method, and transaction history
  • Payment Data: Partial payment card information (we do not store your full card details; these are processed securely by our payment processor)
  • Communication Data: Any correspondence you have with us (such as notes on special requests or order modifications)
  • Technical Data: Device type, browser, and IP address, which are collected through our website for operational and security purposes

Lawful Basis for Processing

Under GDPR, we are required to have a lawful basis for processing your personal data. For Flower Delivery Harold Hill, these are:

  • Contractual Necessity: The majority of your data is used to fulfil our contract with you, that is, to take, process, and deliver your flower order.
  • Legal Obligation: We may process your data to comply with our legal and regulatory obligations, such as for accounting or record-keeping.
  • Legitimate Interest: We may process your data for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include improving our services, fraud prevention, and customer service enhancement.
  • Consent: Where we rely on your consent (such as for sending marketing material), you have the right to withdraw your consent at any time.

How We Use Your Data

Your personal data is used to:

  • Process and deliver your flower order, including confirming, preparing, and fulfilling deliveries to the requested location
  • Communicate with you regarding your order status and respond to your queries
  • Maintain records for internal administrative purposes, such as accounting, customer service, and internal reporting
  • Ensure the security and proper functioning of our website
  • Where you have given consent, send you information about services or products that may interest you

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Typically, we retain customer and transaction data for a period of up to seven years to comply with tax and legal obligations. If you have opted in for marketing communications, we will retain your contact information until you withdraw your consent or opt out.

Once your data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.

Processors and Data Sharing

To provide our services, we may need to share your personal data with trusted third-party service providers (“processors”), such as:

  • Payment processors for secure transaction handling
  • Delivery networks or couriers for fulfilment of your flower orders
  • IT support providers who assist us with website hosting and maintenance

All third-party processors are bound by contractual obligations under GDPR to keep your data secure and process it only as instructed by us. We do not sell or rent your personal information to third parties. In certain cases, we may disclose your data to authorities where required by law.

User Rights

Under GDPR, you have the following rights concerning your personal data:

  • Right to Access: You may request confirmation of what personal data we hold about you and request a copy of that data.
  • Right to Rectification: You have the right to have inaccurate or incomplete data corrected or updated.
  • Right to Erasure (“Right to be Forgotten”): You may request the deletion of your data where there is no longer a lawful reason for us to retain it.
  • Right to Restrict Processing: You may request that the processing of your personal data is limited in certain circumstances.
  • Right to Data Portability: Where applicable, you may request a copy of your data in a structured, commonly used, machine-readable format and have the right to transmit it to another controller.
  • Right to Object: You can object to processing based on our legitimate interests or for marketing.
  • Right to Withdraw Consent: Where we process your data based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the methods provided in your order confirmation or on our website. We may require evidence of your identity before fulfilling your request.

Data Security

We take the security of your data seriously. We implement appropriate technical and organisational measures to prevent unauthorised access, loss, destruction, or disclosure of your information. Our website uses encryption and security protocols to protect your data in transit and at rest. Only authorised personnel and trusted processors have access to your data for legitimate business purposes.

Changes to This Privacy Policy

We may occasionally update this Privacy Policy to ensure continued compliance with relevant laws or to reflect new practices. Any changes will become effective upon posting the revised policy. We recommend checking this page periodically to remain aware of how we handle your information.

Contact for Privacy Concerns

If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, please use the contact details provided in your order confirmation or on our official website. You also have the right to file a complaint with the Information Commissioner’s Office (ICO) if you are not satisfied with our response.