Privacy Policy for Customers of Flower Delivery East Dulwich

Introduction

This Privacy Policy explains how Flower Delivery East Dulwich (“we”, “us”, or “our”) collects, processes, and protects your personal data when you place orders with us in East Dulwich and the surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal information is handled in compliance with the UK General Data Protection Regulation (GDPR).

Scope of this Policy

This Privacy Policy applies to all customers who place orders with Flower Delivery East Dulwich for delivery in East Dulwich and neighbouring areas. By placing an order with us, you acknowledge the use of your personal data in accordance with this policy.

What Data We Collect

When you use our services, we collect and process the following types of data:

• Identification details: Name, delivery address, billing address, and contact phone number.
• Contact information: Email address or telephone number for order updates and communication.
• Order details: Product selection, delivery instructions, order history, and purchase value.
• Payment information: Limited payment details (note: full card information is handled securely by our payment processors only).
• Recipient information: Name, delivery address, and any personalized messages associated with an order.
• Correspondence: Any communications or feedback you send us regarding your order or our services.
• Technical information: IP address, browser type, and device information (collected automatically when you use our online services).

Lawful Basis for Processing Your Data

We process your personal data under the following lawful bases, as defined by the GDPR:

• Contractual necessity: Processing your data is necessary to fulfill your flower delivery order and provide associated customer services.
• Legal obligations: Certain records must be retained for tax, accounting, or regulatory compliance.
• Legitimate interests: We may process your data to improve our services, address customer enquiries, and carry out direct marketing (where applicable and permitted), provided such use does not override your rights and interests.
• Consent: For direct marketing communications or where required by law, we will obtain your explicit consent.

How We Use Your Data

We use your personal data for purposes including, but not limited to:

• Processing and fulfilling your flower delivery order
• Communicating with you about your order and responding to enquiries
• Managing and resolving any issues related to your order or account
• Administrative, legal, and security purposes
• Sending updates or promotional offers (where you have consented)
• Improving our services and business operations

Data Retention

We will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we will store data relating to your order for up to six years for regulatory and tax obligations, unless a longer retention period is required or permitted by law. At the end of the retention period, your data will be securely deleted or anonymised.

Data Processors and Third Parties

We employ trusted third-party service providers (“processors”) to assist in delivering our services, such as:

• Payment processors for secure transaction handling
• IT and cloud hosting providers for data storage and technical support
• Delivery partners who handle the successful delivery of your order
• Professional advisors for legal and regulatory compliance

All third-party processors are contractually obliged to process your data in accordance with this Privacy Policy, under strict confidentiality, and solely for the purpose of providing their services to us. We do not sell or share your personal data with third parties for their own direct marketing purposes.

International Data Transfers

Your data is generally stored and processed within the United Kingdom or European Economic Area (EEA). If we need to transfer your data outside this area, we will ensure appropriate safeguards are in place, such as standard contractual clauses, to maintain the security of your information.

How We Protect Your Data

We implement appropriate organisational and technical measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. Measures include restricted data access, use of encrypted systems where necessary, regular security reviews, and staff training.

Your Rights Under the GDPR

As a data subject, you have the following rights regarding your personal information:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: In certain circumstances, you may request deletion of your data.
• Right to restrict processing: You can request that we limit the processing of your data.
• Right to data portability: Where applicable, you may ask to receive your data in a machine-readable format or have it sent to another controller.
• Right to object: You have the right to object to certain types of processing, such as direct marketing or where our processing relies on legitimate interests.
• Right to withdraw consent: Where we process data on the basis of consent, you can withdraw this at any time.

To exercise your rights, please contact us via our usual customer service channels. We will respond to all legitimate requests within one month.

Automated Decision-Making

We do not use your personal data to make solely automated decisions that significantly affect you. If this changes in the future, we will provide you with required information and safeguards.

Children’s Data

Our services are not intended for children under the age of 16. We do not knowingly collect or process personal information from children under this age.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal compliance. The latest version will always be available via our website or on request. We encourage customers to review it regularly.

Contact and Complaints

If you have questions regarding this policy or how we process your personal data, please reach out to us through our standard customer service process. If you are not satisfied with our response or believe your data protection rights have been infringed, you may lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.