Privacy Policy for Flowers Delivery Chadwell Heath Customers

Our Commitment to Your Privacy

At Flowers Delivery Chadwell Heath, we are dedicated to protecting the personal data you share with us when you place flower delivery orders in Chadwell Heath and the surrounding districts. This Privacy Policy outlines what data we collect, the lawful bases for processing your data, how long we retain your information, our use of data processors, and your rights under the General Data Protection Regulation (GDPR).

Scope of This Policy

This Privacy Policy applies to all individuals placing orders with Flowers Delivery Chadwell Heath, whether online, over the phone, or in-person, for delivery within Chadwell Heath and nearby areas. This policy covers our handling of your data from the moment you initiate your order through the completion of delivery and any subsequent communication related to our services.

What Data We Collect

To fulfil your orders and provide optimal customer service, we collect the following categories of personal data:

• Contact Details: Name, delivery address, billing address, and telephone number.
• Order Details: Information about the products purchased, order history, messages or card text, and recipient’s address and name.
• Payment Information: While payment is typically processed through secure third-party gateways, we may receive limited transaction information (for example, payment status and transaction reference numbers).
• Communication Records: Details of your interactions with us, such as inquiries, feedback, or complaints.
• Technical Data: IP address, browser type, operating system, and usage data when you use our website (collected via cookies or analytics tools).

Lawful Basis for Processing Your Data

We process your personal data on the following lawful bases as set out in Article 6 of the GDPR:

• Performance of a Contract: The majority of data collected is necessary to fulfill the contract for goods or services you have requested (i.e., processing and delivering your flower order).
• Legal Obligation: We may process data where required by law, such as retaining order records for accounting or tax purposes.
• Legitimate Interests: Some processing is carried out as part of our legitimate interest in running and improving our business, such as analyzing order trends to enhance our service, or preventing fraud.
• Consent: Where required, we will seek your explicit consent, for instance, if you sign up to receive marketing communications. You can withdraw this consent at any time.

Retention of Your Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typically, personal data associated with your orders is retained for up to six years following the completion of a transaction to comply with our statutory obligations. After this period, data is securely deleted or anonymized unless we are legally required to keep it for longer.

Use of Data Processors

To facilitate our services, certain aspects of data processing may be conducted by third-party data processors acting on our behalf. These may include:

• Payment gateway providers for secure transaction processing
• IT service providers supporting our website and databases
• Delivery partners involved in transporting your orders
• Customer communication tools for notifications and feedback

All processors are contractually obliged to treat your personal data securely, comply with GDPR, and are only permitted to process your data as instructed by us.

How We Secure Your Data

We implement a range of technical and organizational security measures to ensure the confidentiality and integrity of your data. These include access controls, secure storage, encryption, and regular security assessments. Only authorized personnel and processors can access your personal data for legitimate business purposes.

Your GDPR Rights

As a data subject within the European Union, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Rectification: Request correction of any inaccurate or incomplete data.
• Right of Erasure: Ask for your data to be deleted where it is no longer necessary for us to retain it, subject to legal requirements.
• Right to Restrict Processing: Ask us to limit processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format or request transfer to another service provider where feasible.
• Right to Object: Object to processing of your data based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw this at any time.

To exercise any of these rights, please contact us using your preferred method of communication. We will respond and address your request in accordance with applicable data protection laws. Please note that we may need to verify your identity before fulfilling certain requests.

International Data Transfers

We endeavor to process your data within the UK or the European Economic Area. Should your data ever be transferred to a processor or partner outside this region, we will ensure adequate protections are in place, such as standard contractual clauses or equivalent safeguards, as required by GDPR.

Automated Decision-Making and Profiling

Flowers Delivery Chadwell Heath does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Updates to This Policy

We may review and amend this Privacy Policy from time to time to ensure ongoing compliance with applicable laws and reflect changes in our practices. Updates will be published on our website, and where material changes occur, we will take appropriate steps to inform you in advance.

Contact and Complaints

If you have any questions about how we handle your data, require further information, or wish to raise a complaint, please contact our Privacy Team. We are committed to addressing your concerns. If you remain dissatisfied, you have the right to lodge a complaint with your local data protection authority.