Flower Delivery Highbury GDPR Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Highbury ("we", "us", "our") collects, uses, and safeguards your personal data when you place orders in Highbury and its surrounding districts. We are dedicated to ensuring your privacy is protected in accordance with the UK General Data Protection Regulation (GDPR). This policy sets out your rights and our obligations regarding your information.

Scope of Policy

This policy applies to all customers who place orders for flower delivery services with Flower Delivery Highbury, whether online, via phone, or in-person, within Highbury and neighboring areas. By engaging our services, you agree to the practices described in this Privacy Policy.

What Data We Collect

We collect personal data necessary to provide and improve our flower delivery services. This may include:

• Identification Data: Full name, delivery recipient name, and any instructions for delivery.
• Contact Data: Billing address, delivery address, contact telephone number.
• Order Information: Products ordered, order history, delivery preferences, and payment method (we do not store full credit/debit card numbers).
• Communication Records: Correspondence with you concerning your orders or general queries.
• Technical Data: IP address, browser type and version, time zone setting, and details about your visit to our website (collected via cookies or similar technologies).

Lawful Basis for Data Processing

Under GDPR, we process your personal data using different lawful bases, as required:

• Contractual Necessity: Most of the personal data we process is necessary to fulfill your order, respond to pre-contractual requests, and deliver our services.
• Legal Obligation: Some data may be required for compliance with applicable laws, such as keeping financial records for tax purposes.
• Legitimate Interests: Where applicable, we may process your data to improve our services, prevent fraud, and for customer support, provided these interests are not overridden by your rights.
• Consent: In certain cases, we may ask for your explicit consent, for example, to send marketing materials. Where consent is used, you have the right to withdraw it at any time.

How We Use Your Data

Your personal data is used to:

• Process your flower orders and arrange deliveries.
• Communicate important information regarding your orders.
• Respond to queries, requests, and customer service needs.
• Comply with legal and regulatory requirements.
• Analyze service performance and enhance your customer experience.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. For example, transaction records may be retained for a minimum of six years in accordance with tax and accounting laws. Once personal data is no longer required, it will be securely deleted or anonymised.

Processors and Third-Party Sharing

To provide our services, your data may be processed by third parties acting as data processors on our behalf. These include:

• Payment processors to handle transaction payments securely (we do not store your card details).
• IT service providers supporting our website and order management systems.
• Delivery couriers to ensure successful order deliveries.
• Professional advisers where necessary (e.g. accountants or legal services).

All processors are contractually obligated to protect your data, use it only as instructed by us, and comply with GDPR requirements. We do not sell or rent your data to third parties for their marketing purposes.

Data Security

We are committed to keeping your data secure. Appropriate technical and organisational security measures have been implemented to prevent loss, theft, misuse, or unauthorised access to personal information. These may include encrypted data storage, secure access controls, and regular security assessments.

Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request confirmation of whether we hold personal data about you and receive a copy of it.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: In certain circumstances, you can ask for your personal data to be deleted.
• Right to Restrict Processing: You may request the restriction or suppression of your personal data in specific situations.
• Right to Data Portability: You can request to receive a copy of your data in a commonly used format, or for it to be transmitted to another service provider.
• Right to Object: You can object to processing of your data where we're relying on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where you have given us consent to process your data, you can withdraw it at any time.

To exercise these rights, please contact us via the methods provided on our website. We will respond to your request as soon as possible and no later than one month from receipt.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as required, particularly in response to legal, regulatory or operational changes. Updated versions will be posted on our website with the revised policy effective immediately upon posting.

Contact and Complaints

If you have any questions or concerns about this Privacy Policy, or if you wish to make a complaint about our handling of your data, please contact us using the details available on our website. Should you feel your concerns are not adequately addressed, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

This policy was last updated on 01 June 2024.