Privacy Policy for Flower Delivery Hampstead Garden Suburb

Introduction

This Privacy Policy sets out how Flower Delivery Hampstead Garden Suburb (“we”, “us”, “our”) collects, uses, and protects your personal information in accordance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders for flower delivery in Hampstead Garden and surrounding districts. By using our services, you agree to the practices outlined in this policy.

What Data We Collect

We collect different types of personal data depending on your interactions with us. The categories of data we may collect include:

• Identity Data: Name, delivery recipient’s name
• Contact Data: Delivery address, billing address, phone number, and other contact details
• Order Data: Details of products ordered, delivery instructions, messages or notes to recipients
• Payment Data: Payment method details such as card type (note: all payment processing is handled by third-party providers; we do not store full card numbers or security codes)
• Technical Data: IP address, browser type and version, device identification, and operating system
• Usage Data: Information about how you use our website and services
• Marketing and Communications Data: Preferences for receiving marketing communications from us

Lawful Bases for Processing

Under GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following bases:

• Contractual Necessity: To process your flower delivery orders, fulfil our contractual obligations, and communicate with you about your purchases.
• Legal Obligation: To retain certain data for tax, accounting, and regulatory requirements.
• Legitimate Interests: To improve our services, prevent fraud, and ensure network and information security. We always balance our interests against your rights and freedoms.
• Consent: For marketing purposes, where you have expressly opted in. You are free to withdraw your consent at any time.

How We Use Your Data

Your data is processed for purposes such as:

• Accepting and delivering flower orders
• Communicating order confirmations and updates
• Processing payments via third-party payment processors
• Responding to customer service queries
• Sending marketing communications (with your consent)
• Fraud prevention and network security
>

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Typically, data related to orders is retained for up to seven years to comply with tax and accounting requirements. Data used for marketing will be retained until you opt out or withdraw your consent.

Data Processors and Third Parties

We may use trusted third-party service providers (“processors”) to help deliver our services. These processors may include:

• Payment processors for secure handling of transactions
• IT and cloud storage providers
• Delivery providers for fulfilment of orders
• Communication providers for order updates and customer support
>

All third-party processors are contractually obligated to handle your personal data in compliance with GDPR requirements and are only permitted to process your data as instructed by us.

International Data Transfers

We seek to process and store your data within the United Kingdom or the European Economic Area (EEA) wherever possible. Where data is transferred outside these territories, we ensure it is protected by appropriate safeguards, such as standard contractual clauses.

Your Data Protection Rights

As an individual whose data we process, you have rights under GDPR, which include:

• The right to access: You can request copies of your personal data.
• The right to rectification: Request correction of incomplete or inaccurate data.
• The right to erasure: Ask us to delete your data where there is no good reason for us to continue processing it. This right may be limited by legal requirements.
• The right to object: You may object to processing where we are relying on legitimate interests.
• The right to restrict processing: Request we suspend processing your data under certain circumstances.
• The right to data portability: Request your data in a structured, commonly used, and machine-readable format.
• The right to withdraw consent: Where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of your legal rights, please contact us using the details provided on our website.

Your Responsibilities

If you provide information about someone else (for example, a delivery recipient), you must ensure you have their permission to share their personal data with us for the purposes of delivery and communication.

Security of Your Data

We are committed to keeping your personal data secure. We take appropriate technical and organisational measures to prevent unauthorised access, disclosure, alteration, or destruction of your information.

Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please get in touch so we can remove it.

Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on our website, and where appropriate, notified to you directly.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please refer to the contact details provided on our website.