Flower Delivery Bethnal Green Privacy Policy
Introduction
This Privacy Policy describes how Flower Delivery Bethnal Green collects, uses, stores, and protects your personal information, respecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). The policy applies to all customers placing flower delivery orders within Bethnal Green and the surrounding districts.
What Data We Collect
We collect various types of personal data to fulfill flower delivery orders and to provide a safe, efficient, and customised service. The types of data we collect can include:
- Identification Data: Name, surname, and contact information (such as delivery address).
- Contact Details: Phone number and email address (for order confirmation and delivery updates).
- Order Information: Delivery instructions, recipient details (name, address, and phone number), order notes.
- Payment Information: Although we process payment through third-party processors, we may collect payment confirmation details (but not card numbers or full payment credentials).
- Technical Data: IP address, browser type, operating system, and browsing activity on our website (collected through cookies for website security and analytics).
Lawful Basis for Processing Your Data
Under the GDPR, we must have a lawful basis to collect and process your personal data. Flower Delivery Bethnal Green processes your data on the following bases:
- Contractual Necessity: We process personal information for the purpose of fulfilling your orders and providing related customer services.
- Legal Obligations: We may need to retain information to comply with applicable laws and regulations (such as accounting and tax records).
- Legitimate Interests: To enhance our service, prevent fraud, and improve website security.
- Consent: Where we send marketing communications or use cookies beyond what is necessary, we seek your explicit consent.
How We Use Your Data
The information we collect from you is used for the following purposes:
- To process your orders and deliver flowers to specified recipients.
- To communicate with you about your order status, delivery times, and customer support inquiries.
- To comply with legal and regulatory obligations.
- For internal administrative purposes, including record-keeping and resolving disputes.
- To improve our services, website functionality, and customer experience.
- To send you marketing messages (only if you have provided consent).
Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy, including to fulfill your orders, meet legal obligations, or resolve disputes. The retention periods are as follows:
- Order Details and Delivery Information: Retained for up to 6 years to comply with statutory and accounting requirements.
- Marketing Data: Retained as long as you have not withdrawn your consent or opted out of communications.
- Technical and Analytics Data: Retained for up to 2 years to analyse trends and improve services.
Once the relevant retention period expires or your data is no longer necessary, it will be securely deleted or anonymised.
Data Processors and Third Parties
In order to complete your order and operate our business efficiently, we may share necessary data with carefully selected third-party processors. These include:
- Payment Processors: Secure third-party providers who handle payment transactions. We do not store full payment card details.
- Delivery Partners: Trusted couriers or delivery services who deliver your flowers to the correct address.
- IT and Hosting Providers: Companies providing website hosting, data storage, and technical support.
- Analytics Service Providers: To monitor and improve our website performance (data shared is pseudonymised where possible).
All third-party processors are required to respect the security of your data and comply with GDPR requirements. They may only process your data on our instructions and are not allowed to use it for their own purposes.
International Transfers
While our business primarily operates within the UK and the European Economic Area (EEA), some processors may transfer data outside these regions. In such cases, your data is protected by adequate safeguards, such as standard contractual clauses approved by the European Commission, to ensure your rights are protected.
User Rights Under GDPR
As a customer, you have the following rights under GDPR regarding your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct or update inaccurate or incomplete data.
- Right to Erasure: You can request that your data be deleted when it is no longer necessary for us to retain it.
- Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances.
- Right to Data Portability: Where possible, you can request your data in a machine-readable format, or request its transfer.
- Right to Object: You can object to processing based on legitimate interests or direct marketing at any time.
- Right to Withdraw Consent: If consent is the lawful basis, you may withdraw it at any time.
To exercise your rights, please contact us using the details on our website or the communication methods provided in our order confirmation communications. You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data has not been handled in compliance with the law.
Data Security Measures
We employ a range of technical and organisational measures to ensure your personal data is secure. This includes using HTTPS encryption on our website, maintaining secure servers, limiting access to your data to those employees who require it, and regularly reviewing our data processing practices to address potential security risks.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes to our processes or regulatory requirements. The latest version will always be available on our website. We encourage you to review this policy periodically.
Contact Information
If you have questions about this policy or the way your personal data is handled by Flower Delivery Bethnal Green, please use the contact methods provided on our website. We are committed to resolving any concerns or requests regarding your privacy promptly and transparently.