Flower Delivery Merton Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Merton ("we", "us", or "our") collects, uses, stores, and protects your personal information. This policy applies to all customers placing Flower Delivery Merton orders from the Merton region and its surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and protecting your rights to privacy. Please read this policy carefully to understand our practices regarding your personal information.

What Information We Collect

When you place an order or interact with our services, we collect the following types of personal data:

  • Identity Information: Your full name, contact number, and email address.
  • Delivery Information: Recipient's name, address, and contact details for order delivery purposes.
  • Payment Information: Payment card details and billing address (processed securely via selected payment processors).
  • Order Details: Details of the purchased items, special instructions, and order history.
  • Communication Records: Your communications with us, such as customer service queries and feedback.
  • Technical Data: Device type, IP address, browser type, and cookie data when you use our website for analytical and security purposes.

Lawful Basis for Processing Your Data

Under GDPR, we are required to have a lawful basis for using your personal data. We process your information on the following grounds:

  • Contract Performance: To fulfil your flower delivery orders and provide customer services.
  • Legitimate Interests: To improve our services, prevent fraud, and ensure security of our website and operations. We always balance our interests with your rights.
  • Legal Obligations: To meet legal requirements (for example, maintaining transaction records for accounting and tax purposes).
  • Consent: We may rely on your consent for specific uses, such as sending you marketing communications. You can withdraw your consent at any time.

How We Use Your Personal Data

We use your information for the following purposes:

  • Processing and delivering your flower orders to the specified recipient.
  • Communicating with you regarding your order status, inquiries, or service updates.
  • Facilitating payments, issuing refunds, and managing invoices.
  • Improving our website, products, and services through analysis and feedback.
  • Meeting our legal and regulatory obligations.
  • Sending marketing information and promotions, only where you have opted in.

Retention of Your Data

We retain your personal data only as long as necessary for the purposes stated in this policy:

  • Order and Account Information: Retained for up to 7 years to comply with legal, accounting, and tax requirements.
  • Marketing Preferences: Retained until you withdraw consent or opt out from receiving communications.
  • Technical and Analytical Data: Retained for up to 24 months for the purpose of improving our services, after which it is anonymised or deleted.

After these timeframes lapse, your data will be securely deleted or rendered anonymous for analytical use.

Third-Party Processors

To provide our services effectively, we may share your data with selected third-party processors who support our operations. These include:

  • Payment Service Providers: To securely process your transactions.
  • Delivery Partners: To ensure successful and timely delivery of your flower order.
  • IT and Web Hosting Providers: For website management, customer support, and data storage.
  • Analytical Service Providers: To help us analyse trends and improve our services.

All such processors are required by contract to protect your data, process it only for the specified purposes, and comply with GDPR standards. We do not sell or rent your personal information to any third parties.

Your Rights Under GDPR

You have several important rights under data protection legislation. These include:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of any inaccurate or incomplete information.
  • Right to Erasure: You may request deletion of your personal data where there is no legal or contractual obligation for us to retain it.
  • Right to Restrict Processing: You may ask us to restrict the use of your personal data in certain circumstances.
  • Right to Data Portability: You may ask us to provide the data you provided to us in a structured, commonly used format for transfer to another provider.
  • Right to Object: You may object to the processing of your personal data for direct marketing or where processing is based on our legitimate interests.
  • Right to Withdraw Consent: If you have given consent for processing, you have the right to withdraw your consent at any time. This will not affect any processing carried out before your withdrawal.
  • Right to Lodge a Complaint: If you have concerns about how we handle your data, you may complain to the relevant data protection authority.

Data Security

We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, or misuse. This includes using encryption, regular security assessments, restricted access to personal data, and staff training in data protection obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. We encourage you to review this policy periodically to ensure you are aware of how your information is protected and used.

Contact and Further Information

If you have any questions about this Privacy Policy, your rights, or how we handle your personal data, please reach out to us through our website contact form or in writing at our registered address. We will respond to your query as soon as practicable and in accordance with applicable laws.

This Privacy Policy is effective as of June 2024 and applies to all flower delivery orders placed by customers in Merton and surrounding districts.