Privacy Policy for Flower Delivery Palmers Green Customers

Introduction

This Privacy Policy sets out how Flower Delivery Palmers Green ('we', 'us', or 'our') collects, uses, stores, shares, and protects your personal data. This policy applies to all customers placing orders with Flower Delivery Palmers Green from Palmers Green and the surrounding districts. We are committed to ensuring that your privacy is protected and that your personal information is processed in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection legislation of the United Kingdom.

What Data We Collect

We collect certain personal data from you to enable us to provide our flower delivery services. Depending on your relationship with us and your mode of interaction (e.g., purchasing via website, telephone, or in person), the following data may be collected:

• Identity Data: Name, surname, and, if placing an order on behalf of someone else, the recipient's name (and the recipient’s name if you provide delivery details).
• Contact Details: Delivery address (including postcode), billing address, telephone number, and, where relevant, email address.
• Order Details: Specific details about your order, occasion, and any delivery instructions provided by you.
• Payment Data: Payment method information, partial card details (if provided by phone), and transaction history (note: we do not retain complete payment card numbers).
• Usage Data: Information about your interactions with our website (website traffic data, time spent on site, and navigation patterns), where applicable.

The Purposes and Lawful Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. Flower Delivery Palmers Green primarily relies on the following lawful bases:

• Performance of a Contract: The majority of data we collect is necessary to process and deliver your order as requested, confirm your purchase, or respond to specific requests.
• Legal Obligation: We may need to process some data to comply with statutory obligations, including financial record-keeping and tax compliance.
• Legitimate Interests: We have a legitimate interest in ensuring our services function securely and efficiently, and in improving user experience. In limited instances, we may process data for fraud prevention and to ensure the authenticity of orders.
• Consent: If you sign up for marketing communications, we will process contact details on the basis of your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

• Processing, fulfilling, and delivering your flower orders
• Confirming your orders and managing customer service communications
• Processing payments and handling any queries or complaints
• Complying with accounting, taxation, and other legal obligations
• Improving our products, services, and website functionality
• Contacting you for marketing purposes only when you have consented

Retention of Data

We retain your personal data for no longer than is necessary for the purposes for which it was collected. The retention periods are as follows:

• Order and Transaction Records: Five years to satisfy accounting and tax requirements.
• Contact and Delivery Information: Up to five years from the date of order unless you request deletion sooner, except where law requires longer retention.
• Marketing Data: Until you withdraw consent or unsubscribe from communications.
• Website Analytics: Typically no more than 26 months (if cookies or usage tracking applied).

After these periods, data will be securely deleted or anonymised.

Information Sharing and Data Processors

We do not sell or share your data with third parties for their own marketing use. We may share your data with select trusted data processors only as necessary to conduct our business, including:

• Payment service providers: To securely process payments when you place an order.
• Delivery couriers: To deliver orders to the specified addresses.
• IT support and hosting providers: For website operation, maintenance, and backup services.
• Accountants or legal professionals: To ensure regulatory compliance where required by law.

All external service providers and processors are contractually bound to handle your data securely and in accordance with GDPR requirements.

Your Rights Under GDPR

As a data subject in the UK and the EU, you have the following rights regarding your personal data:

• The right to access: Request a copy of personal data we hold about you.
• The right to rectification: Request correction of inaccurate or incomplete data.
• The right to erasure: Ask for your personal data to be deleted in certain circumstances.
• The right to restriction of processing: Ask us to limit processing of your data under specific conditions.
• The right to data portability: Request an electronic copy of your data or for it to be transferred to another provider.
• The right to object: Object to processing carried out on the basis of legitimate interests or for direct marketing.
• The right to withdraw consent: Withdraw any consent provided at any time for personal data processing for marketing.

Requests can be made verbally or in writing. We will respond within one month as required by law. In some cases, we may need to verify your identity before processing your request.

Data Security

We implement appropriate technical and organisational measures to safeguard your personal data. This includes secure data storage, restricted data access within our business, and regular review of privacy procedures. All payment transactions are handled via secure, PCI-DSS compliant systems. While we make every effort to protect your data, please be aware that transmission of information via the internet is not completely secure.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or for other reasons. Please review this statement periodically. The version date will be displayed at the top of the policy where applicable.

Contact and Complaints

If you have questions, requests, or concerns regarding this Privacy Policy, or if you wish to exercise your rights, please contact us using the channels provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you feel your data has not been processed in accordance with the law.

Thank you for trusting Flower Delivery Palmers Green with your order and your personal information.