Privacy Policy for Customers of Flower Delivery Cambridge Heath

Policy Overview and Scope

Welcome to the Privacy Policy for Flower Delivery Cambridge Heath. Our commitment to protecting your privacy and handling your personal data securely is central to our business operations. This policy outlines how we collect, use, store, and protect your personal information. It also details your rights according to the General Data Protection Regulation (GDPR).

This Privacy Policy applies to all customers placing flower delivery orders with Flower Delivery Cambridge Heath, whether ordering from Cambridge Heath or the surrounding districts. By placing an order or interacting with our services, you acknowledge the practices described herein.

What Personal Data We Collect

We collect personal information essential for fulfilling your flower delivery orders and improving our services. The personal data we collect may include:

• Identity Data: Your name (and the recipient's name if different).
• Contact Data: Your delivery address, billing address, and contact telephone number.
• Order Data: Details of the products you have ordered, delivery instructions, special messages, and purchase history.
• Payment Data: Transaction information regarding your purchase. Note: Card details are processed securely by our payment providers and are not stored by us.
• Communication Data: Any correspondence you send to us, including feedback, inquiries, or complaints you may submit.
• Technical Data: When you visit our website, we may collect data such as IP address, browser type, operating system, and details about your visit for security and analytics purposes.

Lawful Basis for Processing Your Data

Under the GDPR, all processing of your personal data must have a lawful basis. We rely on the following bases for different data processing activities:

• Contractual Necessity: Processing your data is essential for performing and fulfilling the flower delivery contract (i.e., processing orders, arranging deliveries, updating you about your order status).
• Legitimate Interest: We may process data to improve our services, enhance security, and prevent fraud, provided these interests are not overridden by your rights or interests.
• Legal Obligations: Certain data may be processed or retained to fulfil legal obligations, such as taxation and accounting requirements.
• Consent: In specific cases, such as sending you marketing communications, we will obtain your explicit consent. You may withdraw consent at any time.

How We Use Your Personal Information

Your personal data is used for the following purposes:

• To process and deliver your orders efficiently.
• To notify you about the status of your order.
• To respond to your inquiries and provide customer support.
• To manage payment and detect or prevent fraudulent transactions.
• To improve our products, services, and user experience.
• Where permitted, to send promotional communications if you have opted in.

Data Sharing and Processors

We do not sell your personal information to third parties. However, we may share your data with trusted third-party service providers ("processors") as necessary to deliver our services. These may include:

• Payment processing providers who handle transaction data securely.
• Delivery partners or couriers to fulfil your order.
• IT and cloud hosting providers to store and manage our digital infrastructure.
• Professional advisers (accountants, auditors, legal professionals) where required by law.

All processors are contractually bound to comply with GDPR requirements and may only process your data as instructed by Flower Delivery Cambridge Heath. We require all third parties to respect the security and confidentiality of your data and not to use it for their own purposes.

Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting obligations. The typical retention periods are:

• Order and Transaction Data: Retained for up to 7 years to comply with tax and legal requirements.
• Communication Data: Retained for as long as necessary to resolve your inquiry or complaint.
• Technical Data: Retained for up to 2 years for security and analytics purposes.

After these periods, your data will be securely deleted or anonymised so it can no longer be associated with you.

Your Rights Under GDPR

Under the GDPR, you have a number of important rights regarding your personal data. These include:

• Right to Access: Request access to the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data when there is no compelling reason for its continued processing.
• Right to Restriction: Request temporary suspension of processing in certain circumstances.
• Right to Data Portability: Request transfer of your personal data to you or another organisation in a commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the methods described at the end of this policy. We may need to verify your identity before fulfilling your request.

Data Security

We take the security of your personal data seriously. Appropriate technical and organisational measures are in place to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures are regularly reviewed to address emerging threats and maintain a high level of security.

International Transfers

If we need to transfer your personal data outside the United Kingdom or the European Economic Area, we ensure such transfers are subject to appropriate safeguards to guarantee the same level of data protection prescribed by the GDPR.

Policy Updates

We reserve the right to update this Privacy Policy periodically to reflect legal, technical, or operational changes. Updates will be published on our website, and we encourage you to review the policy regularly for the latest information.

Contact and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal data, please reach out to us using our website's provided contact methods. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office or your local data supervisory authority.

This policy applies to all orders placed for Flower Delivery Cambridge Heath from Cambridge Heath and surrounding districts. Your trust is important to us, and we are committed to protecting your privacy.