Flower Delivery Shoreditch Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery Shoreditch collects, uses, shares, and protects your personal data when you place orders with us in Shoreditch and the surrounding districts. We are dedicated to upholding your privacy rights in accordance with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws. Please read this policy carefully to understand how your personal data is managed.

Scope of Policy

This policy applies to all customers placing orders with Flower Delivery Shoreditch within Shoreditch and the surrounding districts, regardless of the order method (website, phone, or in-person). By placing an order, you agree to the practices described in this policy.

What Data We Collect

We collect personal data necessary to process your order and provide our flower delivery services. This includes:

• Contact Information: Full name, delivery address, billing address, and phone number.
• Order Details: Details of the products and services ordered, any specific delivery instructions, and special requests.
• Payment Information: Payment card details and transaction identifiers, processed securely via our payment service providers.
• Communication Records: Correspondence history, including any queries or complaints you may send us.
• Technical Data: IP addresses, browser types, device information—a result of website interactions and necessary for site functionality and security.

Lawful Basis for Processing

We process your personal data on one or more of the following lawful bases, as required by GDPR:

• Performance of a Contract: Processing your data is necessary to fulfill your order for flower delivery.
• Legal Obligation: We may be required to retain or process certain data to comply with legal requirements, such as tax and accounting regulations.
• Legitimate Interests: Processing your data may be necessary for our legitimate business interests, such as improving our services, handling queries, or avoiding fraud, provided these interests do not override your rights.
• Consent: In cases where we require your consent, such as for marketing messages, we will always ask for your explicit permission beforehand.

How We Use Your Data

Your information is used strictly for the purposes outlined below:

• Processing and delivering your order, including communicating updates and confirming delivery.
• Handling queries, requests, or complaints.
• Processing payments and managing billing.
• Improving our products, website, and services.
• Complying with our legal and regulatory obligations.
• With your explicit consent, sending you marketing offers or newsletters.

Sharing and Disclosure

We do not sell or rent your personal information to third parties. In the course of providing our services, we may share your data with:

• Payment Processors: To facilitate secure payment for your order.
• Delivery Partners: To ensure successful delivery of your flowers and gifts.
• IT and System Providers: Who support our website and internal business systems, only as necessary for service provision.
• Legal Authorities: When required by law or to protect our rights.

All third-party processors are required to comply with GDPR and may only use your data in accordance with our instructions. We ensure such partners provide appropriate safeguards to protect your information.

Data Retention

We retain your personal data only as long as necessary for the purposes it was collected and to comply with legal, accounting, and reporting obligations. Typically, customer data related to transactions is held for up to seven years to comply with tax and accounting obligations, unless a longer retention period is required by law. Non-essential data is securely deleted once it is no longer needed.

Data Processors

We use trusted external service providers (processors) to assist with specific functions required for our services, such as:

• Website hosting and maintenance providers
• Payment processing companies
• Courier and logistics firms
• Email and communication platforms (where applicable)

We conduct due diligence when selecting our partners to ensure that your data is protected with high standards. All processors are contractually bound to comply with data protection regulations and our security requirements.

User Rights

Your rights under the GDPR include:

• Right of Access: You can request access to your personal data and receive details about how it is used.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information we hold about you.
• Right to Erasure: You may request deletion of your personal data where there is no good reason for us to keep it.
• Right to Restrict Processing: You can ask us to limit the way we use your data in certain circumstances.
• Right to Data Portability: You may receive your data in a commonly used, machine-readable format, or have it transferred to another provider where feasible.
• Right to Object: You can object to the processing of your data for direct marketing or based on a legitimate interest.
• Right to Withdraw Consent: Where we rely on consent to process your data, you may withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us. We are committed to responding to your requests in a timely manner and will confirm your identity before fulfilling your request to safeguard your privacy.

Data Security

We take data security seriously. We implement robust measures to safeguard your personal data from unauthorized access, loss, or misuse. Examples include encrypted payment transactions, secure storage solutions, regular system monitoring, and restricting access to personal data only to those employees and processors who require it for service delivery.

Changes to This Policy

We may occasionally update this Privacy Policy to reflect changes in our practices, services, or the law. Any significant changes will be communicated to you, where appropriate. Please check this page from time to time to keep informed about how we protect your information.

Contact and Complaints

If you have questions regarding this policy or your personal data, or if you wish to submit a complaint about how your data is handled, please get in touch with us using the contact form provided on our website. If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

This Privacy Policy is effective as of 01 June 2024 and applies to all orders placed with Flower Delivery Shoreditch in Shoreditch and the surrounding districts.