GDPR Privacy Policy for Brondesbury Flower Delivery Customers

Introduction and Scope of Policy

This Privacy Policy explains how Flower Delivery Brondesbury ("we," "us," or "our") collects, uses, and protects your personal information when you order floral products from us. This policy applies to all individual customers placing orders for flower delivery within Brondesbury and the surrounding districts. We are committed to maintaining your privacy and complying with the General Data Protection Regulation (GDPR).

Data We Collect

To provide our services effectively, we collect and process several categories of personal data:

• Contact Information: Including your name, delivery address, billing address, and phone number.
• Order and Transaction Details: Information about the products you purchase, order date, and method of payment (note: we do not store full card details).
• Recipient Details: Name and address of the person receiving the flowers, as provided by you.
• Account Information (if applicable): Log-in and preference data if you create an online account with us.
• Correspondence: Information included in any communication or feedback you send to us.
• Technical Data: IP address, browser type, device information, and cookies, where applicable and with consent, to improve user experience and website performance.

Lawful Basis for Processing

Under GDPR, we are required to have a lawful basis to process your personal data:

• Contractual Necessity: Most of the information we request is required to process and deliver your order.
• Legitimate Interests: We may process your data to improve our services, prevent fraud, and communicate with you regarding your order.
• Legal Obligation: Certain records may be retained or shared as required by applicable law, such as taxation or fraud prevention.
• Consent: For marketing communications, newsletters, or use of website cookies beyond the strictly necessary, your consent will be sought and can be withdrawn at any time.

How We Use Your Information

We use the data we collect for various purposes, including:

• Processing and fulfilling your flower delivery order.
• Communicating about your order status and customer satisfaction.
• Managing your account and preferences.
• Providing customer support and responding to inquiries.
• Improving and personalizing your experience on our website.
• Complying with legal requirements and reporting obligations.
• With your explicit consent, sending promotional offers and updates about our services.

Data Retention

We retain your personal information only for as long as necessary for the purposes it was collected, including:

• Order Fulfillment: Data related to completed orders will be held for up to 7 years to comply with accounting and legal requirements.
• Account Data: If you create an account, your personal data is retained until you request its deletion or for as long as you remain an active customer.
• Marketing Data: If you have consented to receive marketing communications, your contact information will be stored until you withdraw your consent.

After retention periods expire, your data will be securely deleted or anonymized for analytical purposes.

Data Processors and Third-Party Service Providers

To deliver our services, we may share your data with trusted third-party service providers acting as data processors. These may include:

• Payment Processors: For secure payment handling (we do not receive or store your full card details; these are handled by PCI-compliant partners).
• Delivery Partners: For delivering flowers to the recipient at the provided address.
• IT and Cloud Providers: To host our website, manage orders, and maintain security.
• Professional Advisors: Such as accountants or legal consultants, where necessary for compliance and protection of our business interests.

All third parties are required to respect the privacy and security of your data and to process it only in accordance with our instructions and applicable data protection laws.

Your Rights under GDPR

As a customer, you have several important rights concerning your personal data:

• Access: You can request information about the personal data we hold about you.
• Rectification: You have the right to request correction of inaccurate or incomplete data.
• Erasure: You may ask for your data to be deleted when it is no longer necessary for the purposes we collected it, or if you withdraw consent.
• Restriction: You can request restrictions on how we process your data in certain circumstances.
• Portability: You have the right to receive your data in a commonly used, machine-readable format and transfer it to another controller.
• Objection: You can object to the processing of your data, especially for direct marketing purposes.
• Withdrawal of Consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise these rights, you may contact us using the details provided on our website. We will respond to your request in accordance with GDPR requirements and aim to resolve any queries as promptly as possible.

Security of Your Personal Information

We implement a variety of technical and organizational measures to safeguard your personal data. These include secure data storage, access restrictions, regular security reviews, and staff training to ensure all data is handled confidentially and with integrity. Even so, no method of transmission over the internet is completely secure, and we encourage you to take appropriate measures to protect your own data online.

Updates to This Privacy Policy

We review our Privacy Policy regularly and may update it from time to time in line with changes in our services or applicable laws. Any substantial changes will be clearly posted on our website. We encourage you to review this policy each time you use our services to stay informed about our privacy practices.

Contact and Complaints

If you have any questions, concerns, or would like to exercise your data protection rights, please use the contact details provided on our website. You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed.

This Privacy Policy is effective for customers of Flower Delivery Brondesbury placing orders from Brondesbury and all surrounding districts.