Privacy Policy for Customers of Flower Delivery Sydenham

Privacy Statement

Flower Delivery Sydenham is committed to protecting your personal data and upholding your privacy rights. This Privacy Policy explains how we collect, use, and store your personal information in accordance with the General Data Protection Regulation (GDPR) when you place an order with us. This policy applies to all customers ordering flower delivery services from us in Sydenham and the surrounding districts.

What Data We Collect

When you use Flower Delivery Sydenham services, we may collect and process the following types of personal data:

• Contact Details: Your name, address, delivery address, and telephone number.
• Order Information: Details about your flower order, including product selection, delivery date, and card message.
• Payment Information: Data required to process your payment, such as payment card details (processed securely via our payment processor).
• Communication Data: Any correspondence between you and Flower Delivery Sydenham regarding your order, complaints, or queries.
• Technical Data: Information such as IP address, browser type, and device identifiers collected through our website to ensure security and improve service.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to process your personal information. Flower Delivery Sydenham relies on the following bases:

• Contractual Necessity: We process your contact, order, and payment details to fulfill your order and provide our delivery service.
• Legal Obligation: We may use your data to comply with legal requirements, such as accounting and tax obligations.
• Legitimate Interests: Certain data, such as technical and communication information, may be used to improve our services, ensure website security, and resolve any disputes.
• Consent: In cases where you opt-in to receive marketing communications, we process your data based on your explicit consent. You have the right to withdraw this consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and delivering your flower order to the specified address.
• Communicating with you about your order, delivery status, or to resolve any issues.
• Improving our service and customer experience by analyzing feedback and patterns.
• Complying with applicable laws and regulations.
• Sending occasional marketing updates, if you have opted in to receive them.

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected. Typically, order data and relevant correspondence are kept for up to seven years to meet legal recordkeeping and tax requirements. If you have consented to marketing communications, your contact details will be retained until you unsubscribe or request removal. Technical data may be kept for a shorter period for security monitoring and analytics.

Data Processors and Third Parties

Flower Delivery Sydenham uses reputable third-party service providers (“processors”) to support business operations. These may include:

• Payment processors: To securely handle your payment and meet regulatory requirements.
• Website hosting services: To provide and maintain our online platform.
• Delivery partners: For local deliveries in Sydenham and nearby districts.
• Professional advisors: Such as accountants for statutory compliance.

All processors are carefully vetted to ensure their GDPR compliance and will only process data as instructed by Flower Delivery Sydenham. We do not sell your personal data to any third parties.

International Data Transfers

Your personal data is primarily processed and stored within the UK and the European Economic Area (EEA). Where service providers operate outside the EEA, we ensure that appropriate safeguards, such as standard contractual clauses, are in place to protect your information.

How We Protect Your Data

We implement technical and organizational measures to safeguard your personal information against loss, unauthorized access, or misuse. These include encryption, access controls, and staff training on data protection. In the event of a data breach, we will follow GDPR protocols and, where necessary, notify you and the relevant authorities.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request corrections to any inaccurate or incomplete information.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we limit how we use your data in certain circumstances.
• Portability: Receive your personal data in a structured, commonly used format where applicable.
• Objection: Object to certain uses of your data, including direct marketing.
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise your rights, you may contact us using the details provided on our website. We may ask you to verify your identity to ensure your data is protected.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our services. The most recent version will always be available on our website. We encourage you to review it periodically.

Contact and Complaints

If you have questions about this Privacy Policy, about how your personal data is handled, or if you wish to make a complaint, you can reach us via the contact details provided on our website. If you are not satisfied with our response or believe we are not processing your data lawfully, you also have the right to lodge a complaint with the UK Information Commissioner’s Office.

This Privacy Policy was last updated in June 2024 and applies to all orders placed with Flower Delivery Sydenham by customers in Sydenham and surrounding districts.