Flower Delivery Winchmore Hill Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Winchmore Hill (hereinafter referred to as "we", "us", or "our") collects, processes, and protects the personal data of customers placing flower delivery orders from Winchmore Hill and the surrounding districts. We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR). By using our services, you consent to the data practices outlined in this policy.

Data We Collect

When you place an order or interact with Flower Delivery Winchmore Hill, we may collect and process the following categories of personal data:

• Identity Information: Name, surname, and occasion details (for example, birthday, anniversary).
• Contact Information: Billing and delivery address, recipient's address, and telephone numbers where applicable.
• Order Details: Specific product orders, card messages, and preferences related to your purchase.
• Payment Information: Payment card details or transaction references (please note, card details are processed via secure third-party payment processors and are not stored by us).
• Technical and Usage Data: Device type, IP address, browser type, operating system, and pages you access in order to improve our website and services. This may include cookies or similar technologies, subject to your consent and browser settings.
• Correspondence: Records of your interactions with us, such as customer service emails, requests, or feedback.

Lawful Basis for Processing

Under the GDPR, we require a lawful basis to collect and process your personal data. Our lawful bases include:

• Performance of a Contract: Processing your data is necessary for us to fulfil and deliver your flower orders, contact you regarding your purchase, and provide customer support.
• Legal Obligation: When required to comply with applicable laws, such as maintaining records for taxation and accounting.
• Legitimate Interests: Using your information to improve services, prevent fraud, or ensure network security, provided these interests do not override your rights and interests.
• Consent: In some circumstances, such as direct marketing or non-essential cookies, we will ask for your explicit consent before processing your data for these purposes. You may withdraw your consent at any time.

How We Use Your Data

We use your personal information for the following purposes:

• To process, fulfil, and deliver your flower orders.
• To communicate with you regarding your orders or respond to your queries.
• To personalise your shopping experience and suggest relevant products.
• To manage payments, refunds, and prevent fraudulent transactions.
• To meet legal requirements or respond to applicable regulations.
• To analyse usage and improve our website, products, and services.
• To send marketing communications, where you have consented.

Data Sharing and Processors

To provide our services, we may share certain personal data with trusted third-party service providers (processors) under contract to us. These processors only process your data as required to provide services on our behalf and in accordance with data protection law. These may include:

• Payment Processing Partners: for secure payment and transaction authorization.
• Delivery Partners: to ensure orders are delivered to the correct recipients.
• IT Service Providers: for website hosting, maintenance, and data storage.
• Analytical Providers: to help us analyse how our website is used so we can improve our services and user experience.

We require all processors to respect the confidentiality and integrity of your personal data, not to use it for their own purposes, and to process it only for specified purposes and in accordance with our instructions.

We do not sell, rent, or lease your personal data to any third parties for marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. Typically, personal information related to your order will be retained for up to six years, in line with legal tax and record-keeping obligations.

Data used for marketing purposes will be retained until you opt out or withdraw your consent. Once the retention periods have expired, we will securely erase or anonymise your information.

Your Rights Under GDPR

As a customer of Flower Delivery Winchmore Hill, you have the following rights with respect to your personal data under the GDPR:

• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete data.
• Right to Erasure (‘Right to be Forgotten’): The right to request deletion of your personal data, where there is no compelling reason for its continued processing.
• Right to Restrict Processing: The right to request that we limit how we use your information.
• Right to Data Portability: The right to receive your personal data in a commonly used, machine-readable format and to have it transferred to another data controller.
• Right to Object: The right to object to processing based on legitimate interests or direct marketing.
• Rights in Relation to Automated Decision Making and Profiling: The right not to be subject to a decision based solely on automated processing.

If you wish to exercise any of these rights or have concerns about how your data is handled, you may contact us using the contact mechanisms provided on our website.

Security of Your Data

We are committed to ensuring the security of your personal information. We implement appropriate technical and organizational measures to protect your data against unauthorised access, accidental loss, or unlawful destruction. These include encryption, regular security assessments, and restricted access to personal data by our staff and partners.

International Transfers

Your personal data is generally processed within the United Kingdom or the European Economic Area (EEA). Should it be necessary to transfer your data outside of these areas, we will ensure adequate safeguards are in place in compliance with GDPR requirements.

Children’s Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will take appropriate steps to delete it.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The latest version will always be available on our website. We encourage you to review this policy regularly.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we process your data, please refer to our website for the available ways to contact us.