Privacy Policy for Customers Ordering Flowers in Enfield Wash

Introduction

This Privacy Policy outlines how Flower Delivery Enfield Wash collects, uses, stores, and protects personal data for all customers placing flower delivery orders in Enfield Wash and surrounding districts. We are committed to upholding your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. Please review this policy carefully to understand how we handle your information and your data protection rights.

Scope of This Policy

This policy applies to all individual customers who place orders with Flower Delivery Enfield Wash for delivery in Enfield Wash and adjacent areas. By placing an order, you acknowledge and agree to the terms described in this Privacy Policy.

Personal Data We Collect

To process your flower delivery order, we may collect and process the following categories of personal data:

• Identification Data: Name, delivery address, and contact details (such as telephone number).
• Transaction Data: Order details, purchase history, payment method (note: payment details are securely processed by third-party payment providers and not stored by us).
• Recipient Data: Recipient's name, delivery address, and any notes you provide for the delivery (e.g., gift messages or delivery instructions).
• Technical Data: IP address, browser type, and usage data when you place an order online, for purposes of analytics and website functionality.
• Communication Data: Communications between you and our customer service team, including any feedback or complaints.

Lawful Basis for Processing Personal Data

We process your personal data under the following lawful bases as outlined in UK and EU GDPR:

• Contractual Necessity: To fulfil our contract with you by processing and delivering your flower order.
• Legal Obligation: To comply with legal requirements, such as record-keeping for tax or fraud prevention.
• Legitimate Interests: To improve our services, ensure delivery accuracy, handle inquiries, and manage business operations, provided these interests do not override your rights and freedoms.
• Consent: Where required, such as when you opt in to receive marketing updates or newsletters (you may withdraw your consent at any time).

How We Use Your Personal Data

We use your personal data to:

• Process and deliver your order, ensuring correct delivery and customer satisfaction;
• Communicate with you regarding your order, delivery status, customer service requests, or queries;
• Improve and optimise our website and services;
• Comply with our legal and regulatory obligations;
• Manage and resolve disputes or complaints;
• Send you marketing communications if you have provided consent.

Data Retention Policy

We retain your personal data only as long as necessary for the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. In general:

• Order and transaction records are retained for up to seven years to meet legal and tax requirements.
• Account data and email communications may be retained for up to three years after your last interaction with us.
• Data provided for marketing purposes will be retained until you withdraw your consent or request its deletion.

After these retention periods, your data will be securely deleted or anonymised, unless we are legally obliged to retain it for a longer period.

Processors and Sharing Your Data

We use trusted third-party service providers (processors) to assist in fulfilling your orders and operating our business, which may include:

• Payment processing companies to handle secure transactions;
• Delivery partners and couriers working within Enfield Wash and surrounding districts to ensure timely delivery of your order;
• IT service providers for website hosting, software maintenance, and IT support;
• Marketing platforms for communication, only if you have consented.

All processors act on our instructions and must provide sufficient guarantees to meet the requirements of applicable data protection laws. We do not sell or rent your personal data to third parties. Data may only be disclosed if required by law or for the purpose of fraud prevention and security.

Your Rights Under GDPR

The GDPR provides you with several key rights regarding your personal data. You have the right to:

• Access: Request a copy of your personal data we hold.
• Rectification: Request correction of any inaccurate or incomplete data.
• Erasure: Request the deletion of your data, subject to legal retention requirements.
• Restriction: Request restriction of how we process your personal data in certain circumstances.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Portability: Request transfer of your data to another service provider, where technically feasible.
• Withdraw Consent: Where we rely on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our customer service team. We aim to respond to all legitimate requests within one month. We may require verification of your identity to ensure data security.

Security of Your Data

We are committed to ensuring your personal data is kept secure. We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. Our procedures are reviewed regularly to ensure ongoing data security.

Policy Updates

We may occasionally update this Privacy Policy to reflect changes in legal, regulatory, or operational requirements. Any updates will be posted on our website, and where appropriate, we will notify you of significant changes. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact and Further Information

If you have questions or concerns about how we handle your personal data, or if you wish to make a complaint, please contact our customer service team during business hours. You may also contact the UK Information Commissioner’s Office (ICO) if you are dissatisfied with our response.

This policy was last updated on 1 June 2024.