Flower Delivery Barnsbury Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Barnsbury collects, uses, retains, and protects your personal information in compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing orders with Flower Delivery Barnsbury from Barnsbury and the surrounding districts. Your privacy is very important to us, and we are committed to handling your data transparently and lawfully.

What Personal Data We Collect

When you place an order, contact us, or interact with our services, we collect the following categories of personal data:

• Identity Information: Name, title, and in some cases, information about gift recipients such as their name for delivery purposes.
• Contact Information: Delivery address, billing address, and postcode, as well as phone number (if provided) to coordinate deliveries.
• Order Details: Purchase records, order preferences, delivery instructions, and any messages for inclusion with your order.
• Payment Information: Limited payment details required to process your transaction; we do not store full card details as payments are managed via secure third-party payment processors.
• Communication Data: Information you provide when you contact us by phone, website forms, or other means, including queries, feedback, or complaints.
• Technical Data: Limited technical information such as IP addresses, browser types, and device information when you use our website, collected via cookies or similar technologies solely for operational and analytical purposes.

Lawful Basis for Data Processing

We process your personal data using one or more of the following lawful bases as set out by GDPR:

• Performance of a Contract: Most of the data we collect is necessary for fulfilling our contract with you, enabling us to process your order, provide delivery, and communicate with you about your purchase.
• Legitimate Interests: We may process data for purposes that are within our legitimate business interests, such as improving our services, managing customer queries, or preventing fraud, provided these do not override your rights and freedoms.
• Legal Obligation: In some instances, we may need to process data to comply with legal or regulatory requirements, such as maintaining transaction records for tax purposes.
• Consent: Where required (for example, for marketing communications not related to your order), we will ask for your explicit consent and allow you to withdraw it at any time.

How We Use Your Data

Your personal information is used primarily for the following purposes:

• Processing and delivering flower orders, including communication about delivery and any issues.
• Managing payments and preventing payment fraud.
• Responding to customer service requests, feedback, or queries.
• Sending important updates or information regarding your orders.
• Improving our website performance and customer experience through analytics (using only aggregated or anonymized data where possible).
• Meeting our legal and regulatory obligations.

Data Retention

We only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Typically:

• Order data is retained for up to seven years to comply with UK tax and business regulations.
• Technical and analytical data is retained for a shorter period, generally up to two years.
• Personal information used solely for marketing (with your consent) will be retained until you withdraw your consent or unsubscribe, after which it is promptly deleted or anonymized.

Third-Party Processors and Data Sharing

We only share your data with carefully selected third-party service providers, known as processors, who support the delivery and management of our services. These may include:

• Payment processing providers (for secure card payment handling).
• Delivery or courier services (to ensure flowers reach their intended recipient).
• IT service providers for website hosting and customer management systems.
• Professional advisors (such as accountants), where required for business operations.

All third-party processors are bound by contractual obligations to maintain the security and confidentiality of your data, and to use it only as instructed by us. We do not sell, rent, or trade your personal information to third parties for marketing or other purposes.
Data may be transferred outside the UK only where appropriate safeguards are in place, in compliance with GDPR requirements.

How We Protect Your Data

We implement suitable technical and organizational security measures to safeguard your personal information against accidental loss, misuse, alteration, or unauthorized access. Examples of our security practices include limiting access to personal data, using encrypted transmissions for online transactions, and regularly reviewing our data handling procedures.

Your Data Protection Rights

Under the GDPR, you have a number of important rights in relation to your personal data. These include:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You have the right to ask us to correct or update any inaccurate or incomplete data.
• Erasure: In certain circumstances, you may request that your data be deleted (also known as the 'right to be forgotten').
• Restriction: You may request that we restrict the processing of your data under specific circumstances.
• Objection: You can object to us processing your data where we are relying on legitimate interests.
• Data Portability: You can request that we transfer your data to another organization, where technically feasible.
• Withdraw Consent: Where we process your data based on consent, you can withdraw this consent at any time.

To exercise your rights, please contact us using the methods located on our website. We may require proof of identity for security purposes. We aim to respond to all valid requests within one month.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business or legal requirements. When changes are made, we will update the policy date. We recommend reviewing this policy regularly to remain informed about how your data is used and protected.

Contact and Complaints

If you have questions about this Privacy Policy or how we handle your personal data, please get in touch using the contact details on our website. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in accordance with data protection laws.