Flower Delivery Wembley Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Wembley collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with Flower Delivery Wembley from Wembley and its surrounding districts. By using our services, you agree that your personal information will be handled as described in this policy.

What Data We Collect

When you place an order for flower delivery with us, we collect the following categories of personal data:

• Identity Data: Includes your full name and, where applicable, the recipient's name.
• Contact Data: Includes billing and delivery address, phone number, and other contact details provided in connection with your order.
• Order Details: Includes information about the products you order, delivery instructions, and past order history.
• Payment Data: Includes payment method information. Please note our payment processors handle payment card details; we do not store or process full payment card data ourselves.
• Communications Data: Includes any correspondence with us, such as order confirmations, enquiries, or feedback you provide.
• Technical Data: May include your IP address, browser type, and device information collected automatically when you use our website.

The data we collect is strictly limited to what is necessary to process your order, deliver our services, comply with legal obligations, and for legitimate business purposes.

Lawful Basis For Processing Your Data

We process your personal data only when permitted by law. The lawful bases on which we rely under the GDPR include:

• Contractual Necessity: To fulfill our contract with you by processing and delivering your order.
• Legal Obligations: To comply with legal and regulatory requirements, such as record-keeping for tax purposes.
• Legitimate Interests: To improve our services, prevent fraud, and ensure security. We balance these interests against your rights and freedoms.
• Consent: For certain uses, such as sending marketing communications if you have opted in. You may withdraw your consent at any time.

How We Use Your Personal Data

Your information is primarily used to:

• Process and deliver orders
• Communicate order updates or changes
• Verify your identity and your payment method
• Facilitate delivery to recipients
• Respond to your enquiries or complaints
• Improve the quality of our service
• Comply with applicable laws and regulations

Data Retention - How Long We Keep Your Data

We keep your personal data only as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Typically, we retain order-related data for up to 7 years to comply with tax and financial regulations. Data used for marketing purposes with consent is retained until you withdraw your consent or unsubscribe. After these periods, your data is securely deleted or anonymised.

Data Processors and Third Parties

To deliver your order and run our business efficiently, we sometimes need to share your information with third parties known as data processors. These may include:

• Payment service providers processing your payment transactions
• Delivery partners and couriers for delivering your order
• IT service providers assisting with our website and database hosting
• Accountants or legal advisors for regulatory compliance

All our data processors are contractually bound to process your data in a manner that complies with the GDPR and ensures your information is safe and secure. We do not sell or rent your personal information to third parties.

Security Of Your Data

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, use, alteration, or disclosure. Measures include regularly updated firewalls, restricted access to your data, secure data storage, and secure payment procedures via third-party providers.

Your Rights Under The GDPR

The GDPR grants you several important rights regarding your personal data:

• Right to Access: You may request information about the data we hold about you and obtain a copy.
• Right to Rectification: You have the right to request corrections to inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you can request the deletion of your data.
• Right to Object: You can object to our processing of your data where we rely on legitimate interests or for direct marketing purposes.
• Right to Restriction: You can ask us to restrict the way we use your data in specific contexts.
• Right to Portability: You can request that we transfer your data to you or another controller in a machine-readable format.
• Withdrawal of Consent: Where we rely on consent, you can withdraw this at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Automated Decision-Making: We do not use your data for automated decision-making that produces legal effects concerning you.

To exercise these rights, please contact us using the methods outlined in your order confirmation or on our website. We may need to verify your identity before responding to your request and will respond within one month as required by law.

International Data Transfers

In general, your personal data is processed within the United Kingdom or the European Economic Area (EEA). If we ever need to transfer your data to a country outside the EEA, we will ensure that suitable safeguards are in place, such as approved standard contractual clauses, to protect your information under GDPR standards.

Updates To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. Please review this policy periodically for the latest information. Significant updates will be communicated as appropriate and marked in the policy document.

Contact and Complaints

If you have any questions about this policy or your data, or if you wish to make a complaint, please contact us as indicated in your order confirmation or by using the details provided on our website. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office or your local supervisory authority.

Your privacy is important to us. Flower Delivery Wembley is committed to protecting your personal data and being transparent about our practices.