Flower Delivery Upper Norwood Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Upper Norwood collects, uses, and protects your personal information when you place orders for flower delivery in Upper Norwood and its surrounding districts. We are committed to upholding your privacy and handling your personal data in compliance with the General Data Protection Regulation (GDPR) and all applicable laws.

Scope of this Privacy Policy

This Privacy Policy applies to all customers who place orders with Flower Delivery Upper Norwood, whether directly or through our website, and who reside in or request deliveries to Upper Norwood and neighboring areas. By using our services, you agree to this policy and our handling of your personal information as described herein.

What Data We Collect

To process your orders and provide the best possible service, we collect the following categories of personal data:

• Contact Information: Name, delivery address, billing address, and contact details such as a phone number or email address.
• Order Information: Details of your flower orders, special instructions, messages for recipients, and any gift notes.
• Payment Information: Payment transaction details. Please note that we do not store your full credit or debit card information; these are processed securely through our payment processors.
• Website Usage Data: If you place orders online, we may collect data such as your IP address, browser type, device information, and pages visited to enhance our services and security.
• Correspondence: Any communication you send to us, such as enquiries or feedback.

Lawful Basis for Data Processing

Under GDPR, we are required to specify the legal basis on which we process your personal data. Flower Delivery Upper Norwood relies on the following lawful bases:

• Contract: Processing your data is necessary for the performance of a contract (fulfilling your order and delivering flowers).
• Legal Obligations: In some cases, we must process your data to comply with legal or regulatory requirements.
• Legitimate Interests: We may process certain data for our legitimate business interests, such as improving services, preventing fraud, or handling customer complaints, provided your interests and fundamental rights do not override these interests.
• Consent: Where legally required (such as for marketing communications), we rely on your explicit consent, which you can withdraw at any time.

Use of Your Personal Data

We use your personal information for the following purposes:

• To process, confirm, and deliver your orders.
• To communicate with you about your order status, delivery updates, or any queries you may have.
• To manage payments and refunds.
• To improve our website functionality and service offerings.
• If opted-in, to send promotional offers or newsletters—subject to your consent.
• To comply with applicable legal and regulatory requirements.

Data Retention

We retain your personal information for no longer than is necessary for the purposes for which it was collected. Typically, order and transaction data are kept for up to seven years to satisfy legal, tax, and accounting obligations. Contact and correspondence data are retained as long as needed to respond to your queries or provide customer support. Marketing preferences are maintained until you withdraw consent. Once your data is no longer required, it will be securely deleted or anonymized.

Data Processors and Third-Party Service Providers

To fulfil your orders and deliver our services, we may share your personal data with trusted third parties known as data processors, including:

• Payment Processors: To process your payment transactions securely.
• Delivery Partners: To ensure flowers are delivered to your chosen address.
• IT and Hosting Providers: For website hosting, maintenance, and data storage.
• Professional Advisors: For accounting, legal, or compliance purposes as required by law.

All third-party providers are required to keep your personal information secure and are not authorized to use it for their own purposes. We do not sell or lease your personal information to any third parties.

User Rights under GDPR

Under GDPR, you have several rights regarding your personal information:

• Right to Access: You may request details of the personal data we hold about you.
• Right to Rectification: You are entitled to request correction of inaccurate or incomplete data.
• Right to Erasure: Also known as the "right to be forgotten," you may ask us to delete your data in certain circumstances.
• Right to Restrict Processing: You can request restrict how we use your data.
• Right to Data Portability: You can request a copy of your data in a machine-readable format for transfer to another provider.
• Right to Object: You have the right to object to certain processing, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You may file complaints with a data protection authority if you believe your rights have been violated.

To exercise any of these rights, please reach out to us using the contact details on our website. We will respond to your requests in accordance with applicable GDPR timelines and requirements.

Security of Your Data

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. These include encryption, access controls, secure storage, and staff training. However, while we strive to protect your data, no method of internet transmission or electronic storage is completely secure.

International Data Transfers

In some cases, your personal data may be processed or stored outside the United Kingdom or European Economic Area. Where this occurs, we ensure that appropriate safeguards are in place to protect your information, including contractual clauses or other approved mechanisms as required by GDPR.

Policy Updates

We may update this Privacy Policy from time to time to reflect legal, regulatory, or business changes. The latest version will always be available on our website. Please review this page periodically to stay informed of how we are protecting your information.

Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please consult our contact page for ways to get in touch. We welcome your feedback and are committed to safeguarding your privacy.