Privacy and Data Collection Policy for Flower Delivery Chislehurst
Our Commitment to Data Protection
At Flower Delivery Chislehurst, safeguarding your privacy and personal data is central to our business and reputation. We are committed to complying with all obligations under the General Data Protection Regulation (GDPR) and relevant UK data protection laws. This policy describes how we collect, use, store, and protect your personal information when you order flower deliveries from Chislehurst and surrounding districts. It also details your rights in relation to your personal data.
Who This Policy Applies To
This Privacy Policy applies to all customers placing flower delivery orders through Flower Delivery Chislehurst, whether ordering for personal use, as a gift, or on behalf of another party, and covers services within Chislehurst and neighboring areas. Our goal is to ensure that you are fully informed about how we will use and protect your data at every stage of your order with us.
What Data We Collect
To provide our flower delivery service, we collect the following types of personal data:
- Contact Information: Your name, delivery address, billing address (if different), telephone number, and any other identifying details necessary to fulfill your order.
- Order Details: Product selections, delivery notes, preferred delivery times, and instructions.
- Recipient Information: Recipient’s name, delivery address, and contact details if different from the customer (for gift deliveries).
- Payment Information: Payment method details and transaction identifiers. We do not directly retain complete card payment information, as transactions are processed through secure third-party payment processors.
- Communications: Records of email or written correspondence with our customer services, feedback, and reviews.
- Website Usage Data: Non-personal analytical data such as IP address, browser type, device information, visit duration, and pages visited, primarily collected via cookies and similar tracking technologies for the enhancement of our online services.
Lawful Basis for Data Processing
We only process your personal data where there is a lawful basis as defined in the GDPR:
- Performance of Contract: The majority of your personal data is processed so we can enter into and fulfill our contract with you (delivering flowers as per your order).
- Legal Obligations: Certain data is retained to meet financial, auditing, and regulatory requirements.
- Legitimate Interests: Some information is used to improve our services, prevent fraud, and ensure the security of our business, where these interests are not overridden by your rights.
- Consent: Where required, particularly for marketing communications, we will obtain your explicit consent. You may withdraw this consent at any time.
How We Use Your Data
Personal data collected may be used for the following purposes:
- Processing payments and fulfilling your flower delivery orders.
- Communicating with you about your order, delivery status, or any changes or issues.
- Managing account or order-related queries, returns, or concerns.
- Improving and personalizing our services and website functionality.
- Meeting financial, legal, and regulatory obligations.
- Sending you carefully selected marketing material (where you have opted-in).
Data Retention Policy
We retain your personal data only for as long as is necessary to fulfill the purposes outlined in this policy, including:
- Order and Transaction Records: Held for up to six years to comply with statutory accounting and tax obligations.
- Recipient and Contact Details: Retained for operational and record-keeping purposes for a period in line with our contractual and legal requirements.
- Marketing Preferences: Retained until you withdraw your consent or opt-out, whichever occurs first.
- Website Analytics: Typically held in an anonymized or pseudonymized format, and retained for periods necessary to improve user experience and maintain security.
Once retention periods expire, your personal data will be securely deleted or anonymized, unless there is a legitimate need or legal obligation for ongoing storage.
Sharing Your Data and Use of Processors
Your data is shared only when and where necessary for the performance of our contract or as required by law. We may share your data with:
- Payment Processors: Reputable third-party providers who manage payment transactions securely.
- Delivery Partners: Florists or couriers acting on our behalf solely for delivering your order.
- IT and Software Providers: Companies providing hosting, website maintenance, or order management systems, who only process data according to our instructions and agreements.
- Legal and Regulatory Authorities: Where disclosure is mandated by law or required to protect our rights or the rights of others.
All third-party processors are selected with great care and are bound by contractual agreements to uphold GDPR standards and protect your data.
How We Protect Your Data
We implement appropriate technical and organizational security measures to keep your personal information safe, including encryption, access controls, secure backups, and regular reviews of data handling procedures. We ensure that staff and processors handling your data have been trained in data protection and confidentiality.
Your Rights Under the GDPR
You have numerous rights in relation to your personal data held by Flower Delivery Chislehurst, including:
- Right of Access: You may request a copy of your personal data we hold about you.
- Right to Rectification: You may request corrections to inaccurate or incomplete data.
- Right to Erasure: Under certain circumstances, you may request the deletion of your personal data.
- Right to Restrict Processing: You may ask us to restrict the use of your data in certain situations.
- Right to Data Portability: You may request to receive your personal data in a commonly used, machine-readable format.
- Right to Object: You can object to our processing of your data where we rely on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time.
To exercise your data protection rights, raise a query, or make a complaint, please use the contact details provided in your order confirmation or on our website.
Changes to This Policy
We may occasionally update this Privacy Policy to reflect changes in our practices or legal obligations. We encourage our customers in Chislehurst and surrounding districts to review this policy regularly. Your continued use of our flower delivery services after any changes signifies your acceptance of those changes.
Contact and Further Information
If you have any questions about this Privacy Policy or our data practices, please refer to the contact information provided with your order. We are committed to addressing your concerns swiftly and transparently.