Privacy Policy for Flower Delivery Maida Vale Customers

Introduction

This Privacy Policy outlines how Flower Delivery Maida Vale handles your personal information when you place an order with us in Maida Vale and neighbouring districts. As part of our commitment to your privacy and in compliance with the General Data Protection Regulation (GDPR), this document details what data we collect, the lawful basis for processing your data, how long we retain it, our use of data processors, and your rights as a data subject.

Who This Policy Applies To

This Privacy Policy applies to all customers who place orders with Flower Delivery Maida Vale for delivery or collection in Maida Vale and the surrounding districts. By using our services, you agree to the terms set out in this policy.

What Personal Data We Collect

To process and deliver your floral orders, we collect different types of information, including:

  • Contact Information: Your name, billing and delivery addresses, telephone number, and, if provided, alternative contact names and numbers for recipients.
  • Order Details: Information about products ordered, delivery instructions, messages to recipients, and transaction history.
  • Payment Details: Depending on your method of payment, partial data such as masked card numbers or payment transaction references may be retained. Payment card details are processed securely by our payment processor and not stored by Flower Delivery Maida Vale.
  • Communications: Any messages, queries, or feedback you submit to us through contact forms or while placing an order.
  • Technical Data: Your IP address, browser type/version, and cookies necessary for functionality, performance, and security.

Lawful Basis for Processing Your Data

We process your personal data only when allowed by law. The most common bases include:

  • Contractual Necessity: Processing your data so we can complete your order and fulfill our contractual obligations, such as arranging delivery or generating invoices.
  • Legitimate Interest: Enhancing and securing our services, improving customer experience, and preventing fraud.
  • Legal Obligation: Where required by applicable law, such as maintaining financial records for our statutory obligations.
  • Consent: In cases where we rely on your consent (e.g., for sending marketing communications), you have the right to withdraw this consent at any time.

How We Use Your Personal Data

Your data is processed for the following specific purposes:

  • To accept, process, and deliver your flower orders.
  • To communicate with you regarding your order, respond to queries, or provide updates.
  • To personalise your experience and provide recommended products based on previous orders.
  • To comply with our legal and accounting obligations.
  • To improve our services and customer support.
  • To protect against fraudulent transactions and ensure security.

How We Share Your Personal Data

We restrict access to your personal data to employees or agents who need the information to fulfil your order. Your information may be shared with third parties only in the following scenarios:

  • Service Providers: We use trusted third parties (data processors) to deliver certain services on our behalf, such as payment processing, website hosting, IT support, and delivery logistics. All such providers are subject to strict data processing agreements and must adhere to GDPR standards.
  • Legal Compliance: If required by law, we may disclose your data to government authorities or regulators.

We do not sell or rent your personal data to third parties for marketing purposes.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including fulfilling orders, satisfying legal, accounting, or reporting requirements, and resolving disputes. For most order and customer relationship data, we keep records for seven years after your last transaction to comply with legal and financial regulations.

If you have opted-in to receive marketing communications, your contact details will be retained until you revoke consent or unsubscribe.

Your Rights Under GDPR

You have several important rights as a data subject, including:

  • The Right to Access: You may request a copy of your personal data held by us.
  • The Right to Rectification: You may ask us to correct any personal data that is inaccurate or incomplete.
  • The Right to Erasure: In certain circumstances, you may ask us to delete your personal data, for example where it is no longer necessary for the original purpose of collection.
  • The Right to Restrict Processing: You may request that we limit how we use your data.
  • The Right to Object: You may object to processing when we rely on legitimate interests as the basis for processing.
  • The Right to Data Portability: You may request your data in a machine-readable format for transmission to another provider, where technically feasible.
  • The Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, please contact us with your request. We will respond within one month as required by law.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. These measures include secure servers, encryptions, restricted access, and regular review of our procedures.

Data Transfers

Your data is generally processed and stored within the UK/European Economic Area. Should it ever be necessary to transfer data outside of the EEA, we will ensure the destination country has adequate protections in place as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations or legal requirements. We encourage you to review this policy periodically. The most current version is always available through our website.

Contact & Queries

If you have any questions about this Privacy Policy or would like to make a request regarding your personal data, please contact us through the methods indicated on our website or in your order confirmation.