Flower DeliveryAddlestone Privacy Policy

Introduction

This Privacy Policy explains how Flower DeliveryAddlestone collects, uses, stores, and protects your personal information when you place an order with us, either directly or through our website. The policy applies to all customers in Addlestone and the surrounding districts who use our flower delivery services. We are committed to handling your data in compliance with the General Data Protection Regulation (GDPR).

What Data We Collect

When you place an order with Flower DeliveryAddlestone, we collect certain personal data required to fulfill your request and provide you with the best service possible. The categories of data we collect include:

• Identity Data: Name of the customer placing the order and, if relevant, the recipient.
• Contact Data: Delivery address, billing address, phone number (if supplied), and any other contact details required to process the order.
• Order Data: Details of flowers and products ordered, delivery instructions, and order history.
• Payment Data: Payment method information (but not full card details; payments are processed securely through third-party payment processors).
• Communication Data: Any correspondence between you and Flower DeliveryAddlestone, such as customer service queries regarding your order.

We do not intentionally collect any sensitive personal data (such as religious beliefs or health information) as a routine part of our service.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. Our use of your data is justified by the following grounds:

• Contractual Necessity: We process your data to fulfill and deliver your orders, provide customer service, and manage your transactions.
• Legitimate Interests: We may process your data to improve our service, communicate important service-related information, or prevent fraud, as long as these interests do not override your rights and freedoms.
• Legal Obligations: Some data may be processed to comply with accounting, tax, or other legal obligations.
• Consent: Where we rely on your consent for the use of data for purposes such as sending you marketing information, you can withdraw this consent at any time.

How We Use Your Data

Flower DeliveryAddlestone uses your personal data for the following purposes:

• To process, confirm, and deliver your orders to the specified address.
• To contact you regarding your orders and provide customer support.
• To improve our website, services, and customer experience.
• To meet our legal and regulatory requirements.
• To send you promotional communications if you have opted in (and always offering an easy way to opt out).

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including meeting legal and accounting requirements or resolving disputes.

Order and transaction data are typically retained for up to six years to comply with relevant financial and tax regulations. Communication data relating to customer queries may be retained for up to three years after resolution of the enquiry. When data is no longer needed, it is securely deleted or anonymised.

Third-Party Processors

To provide our services effectively, we may share your data with certain trusted third parties (data processors), always ensuring that they comply with GDPR obligations. These may include:

• Payment Providers: To securely process your payments without retaining your full payment details.
• Delivery Partners: To ensure timely and accurate delivery of your flowers.
• IT and Support Services: For website hosting, customer support, and IT maintenance.
• Professional Advisors: Such as accountants or legal consultants, for compliance with legal responsibilities.

We do not sell, trade, or otherwise transfer your personal data to unrelated third parties for marketing purposes. Where data is shared with processors, it is limited to what is necessary, and appropriate contracts are in place to ensure your information is protected.

International Data Transfers

As a general rule, we store your data within the United Kingdom or European Economic Area (EEA). If we ever need to transfer data outside these areas, we ensure adequate safeguards are in place in compliance with GDPR requirements, such as standard contractual clauses or relevant certifications.

Your Data Protection Rights

As a customer of Flower DeliveryAddlestone, you have several rights regarding your personal data under the GDPR:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You have the right, in certain circumstances, to request that your data be deleted.
• Right to Restrict Processing: You can request limitations on how we use your data under certain conditions.
• Right to Data Portability: You have the right to receive a copy of your data in a commonly used format or request its transfer to another provider.
• Right to Object: You can object to certain processing activities, such as direct marketing.
• Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw this at any time without affecting the processing lawfulness before withdrawal.

To exercise any of your rights or to enquire further about our data practices, please contact us using the details available on our website.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in privacy law or our data practices. Any updates will be posted on our website, and significant changes will be communicated clearly to you when applicable.

Contact and Concerns

If you have questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us using the contact details provided on our website. If you remain dissatisfied, you may also contact the Information Commissioner’s Office (ICO) in the UK.

Thank you for trusting Flower DeliveryAddlestone with your information. We are committed to safeguarding your privacy and providing a transparent and secure service in compliance with all applicable data protection regulations.