Privacy Policy for Customers of Flower Delivery Brentwood

Introduction

This Privacy Policy describes how Flower Delivery Brentwood ("we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you place orders for flower delivery services within Brentwood and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and local data protection laws to safeguard your privacy and provide transparency about our data processing activities.

Scope of This Policy

This policy applies to all individuals placing orders for Flower Delivery Brentwood products and services within Brentwood and neighboring areas. By using our services, you acknowledge and accept the practices described in this policy.

Types of Personal Data Collected

We collect and process various categories of personal data depending on your interactions with us, including but not limited to:

  • Identity Data: Your full name, recipient’s name.
  • Contact Data: Delivery address, billing address, recipient address, telephone number (if provided).
  • Order Information: Details about the items you order, order dates, and special instructions.
  • Payment Data: Information related to payments (such as the last four digits of your card and confirmation of payment status). We do not store full credit/debit card numbers, as these are processed securely by our payment processors.
  • Communication Data: Correspondence between you and Flower Delivery Brentwood, including queries or feedback.
  • Technical Data: IP address, browser type, device information, and cookies (collected automatically when you interact with our website for security and analytics purposes).

Lawful Basis for Processing Personal Data

Under GDPR, we are required to have a legal basis for processing your personal data. The lawful bases relevant to our operations include:

  • Performance of a Contract: Processing your data is necessary to fulfill your order, arrange deliveries, and provide our services.
  • Legal Obligations: We may process certain data to comply with applicable laws, such as tax and accounting requirements.
  • Legitimate Interests: For certain marketing, service improvement, or fraud prevention purposes, provided these interests are not overridden by your rights and interests.
  • Consent: Where required (for example, for direct marketing activities), we will obtain your explicit consent before processing your data.

How We Use Your Personal Data

Your personal data is used for the following purposes:

  • Processing and fulfilling flower delivery orders.
  • Communicating with you and the recipient regarding order updates.
  • Processing payments and preventing fraudulent transactions.
  • Responding to your inquiries, complaints, or feedback.
  • Improving our website, products, and customer services.
  • Meeting legal and regulatory requirements.
  • Sending marketing information, where lawful and with your consent.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined above, satisfy any legal or accounting obligations, resolve disputes, and enforce agreements. Typically, we will retain order and transaction data for up to seven years, in accordance with tax and contractual requirements. Non-essential data may be deleted sooner if not needed. Data provided with consent for marketing is retained until you withdraw consent.

Third-Party Data Processors

We rely on third-party processors to help deliver our services. These processors may include:

  • Payment processing companies to securely handle payments.
  • IT hosting and website management service providers.
  • Delivery partners to facilitate the transportation and delivery of your order.
  • Analytics providers to help us understand website usage and improve our service.

All third-party processors are vetted to ensure they meet GDPR data protection requirements and are only supplied with the data necessary to perform their functions.

International Transfers

While we primarily process your data within the United Kingdom or European Economic Area (EEA), some third-party processors may operate outside these regions. In such cases, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses or equivalent, to protect your personal data in accordance with GDPR requirements.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These include secure servers, encryption, access controls, and staff training on data protection awareness.

Your Rights Under GDPR

As a Flower Delivery Brentwood customer, you have the following rights concerning your personal data:

  • Right to Access: Request access to the personal data we hold about you.
  • Right to Rectification: Request correction of any inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data under certain circumstances.
  • Right to Restrict Processing: Ask us to restrict the processing of your data in certain situations.
  • Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to the processing of your data where our legal basis is legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw this consent at any time.

To exercise any of these rights, please contact us through our designated contact methods. We may need to verify your identity before addressing your request.

Children's Data

Our services are intended for customers aged 18 and above. We do not knowingly collect personal data from children. If we discover that data has been mistakenly collected from a minor, it will be promptly deleted.

Changes to This Privacy Policy

We reserve the right to update this policy to reflect changes in our services, legal requirements, or data protection best practices. The latest version will always be made available via our main website. Significant changes will be communicated to you where required by law.

How to Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how your data is handled, please use our published contact methods on our website. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.