Flower Delivery Feltham GDPR Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery Feltham ("we", "us", or "our") collects, uses, shares, and safeguards your personal data when you place an order for our flower delivery services in Feltham and the surrounding districts. We are committed to ensuring that your privacy is protected and that your personal data is handled transparently, securely, and in compliance with the General Data Protection Regulation (GDPR).

Scope and Applicability

This Privacy Policy applies to all customers placing orders with Flower Delivery Feltham for flower delivery services in Feltham and its nearby areas. By engaging with our services, you acknowledge and agree to the practices described in this Privacy Policy.

What Data We Collect

When you order from Flower Delivery Feltham, we collect and process the following types of personal data:

• Contact Information: Name, delivery address, billing address, and phone number.
• Order Information: Details about your flower selection, delivery date, recipient’s name and address, and any personalized messages included with your order.
• Payment Information: Method of payment, cardholder’s name, payment confirmation details. (Please note, card numbers and sensitive financial data are processed solely by our payment providers and not stored by us.)
• Communication Data: Information provided when contacting us (inquiries, requests, customer support messages).
• Technical Information: Limited data such as your IP address, device identifiers, browser type, and date/time of website visits when ordering online.

Lawful Basis for Data Processing

We process your personal data under the following lawful bases as defined by the GDPR:

• Contractual Necessity: Most data (such as contact and order information) is processed to fulfil our contract with you and deliver your chosen flowers to the intended recipient.
• Legal Obligation: Certain data may be processed to comply with legal obligations, such as maintaining transaction records for tax and compliance purposes.
• Legitimate Interests: Where necessary, we process data for legitimate business interests, such as record-keeping, quality control, fraud prevention, and to develop and improve our services. Any such processing is conducted with your rights and interests as a priority.
• Consent: In rare cases, if we seek to process your data for reasons other than those listed above (for example, for marketing purposes), we will seek your explicit consent beforehand.

How We Use Your Personal Data

Your data is used solely for the purpose of providing excellent flower delivery services. This includes processing your order, communicating with you about your order, handling payments, delivering flowers, and resolving any issues or inquiries related to your delivery. We may also occasionally review customer orders and patterns for business analysis, but this is done in a way that protects your privacy.

Data Sharing and Processors

We never sell or rent your personal data to third parties. However, your data may be shared with trusted service providers ("processors") who carry out specific functions on our behalf, in accordance with GDPR. Examples include:

• Payment Processors: Secure handling of card transactions and payment verification.
• Delivery Partners: When we use third-party couriers to deliver orders, they receive only that data necessary to fulfil the delivery.
• Technology Service Providers: Hosting, IT support, and website developers who assist in running our online presence and keeping your data secure.

All processors are contractually bound to keep your data confidential, secure, and only use it as instructed by us. We do not allow our processors to use your personal data for their own purposes.

Retention Periods

We retain your personal data only as long as is necessary for the purpose for which it was collected, including fulfilling your order, meeting legal, accounting, or reporting requirements, and resolving disputes. In practice, this means:

• Order Records: Retained for up to 7 years to comply with accounting obligations.
• Customer Communications: Retained for up to 2 years following the last contact or fulfilment of your order.
• Payment Data: Sensitive payment details are never stored by us but retained by our payment processors as required by law.

When data is no longer required, it is securely deleted or anonymized.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can request corrections to your personal data if it is inaccurate or incomplete.
• Erasure: You can request deletion of your personal data in certain situations, for example when it is no longer needed.
• Restriction: You may request a restriction of processing if you contest the accuracy of your data or object to processing.
• Objection: Where we process data based on legitimate interests, you can object to such processing.
• Portability: You have the right to receive your data in a commonly used, machine-readable format and have it transmitted to another controller where feasible.

To exercise these rights, please contact us as described at the end of this policy. We will respond to your request within one month, in accordance with GDPR requirements.

Data Security

We take your data security seriously and put in place reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. Access to your data is restricted to authorized personnel and trusted processors only.

International Data Transfers

All customer data is stored within the United Kingdom or European Economic Area (EEA), and we do not transfer your data outside these jurisdictions. If any future transfer outside the EEA becomes necessary, we will ensure that adequate safeguards are in place as required by GDPR.

Policy Updates

We may update this Privacy Policy from time to time. Any changes will be clearly notified on our website or during your ordering process. We encourage you to review this policy periodically.

Contact and Complaints

If you have concerns or questions regarding your personal data or this Privacy Policy, or if you wish to exercise your GDPR rights, please contact us using the contact information available on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that your data has not been handled in accordance with the law.

We are dedicated to handling your personal data respectfully and look forward to delivering not only beautiful flowers but also trustworthy service.