Privacy Policy for Flower Delivery Vauxhall Customers

Introduction

This Privacy Policy outlines how Flower Delivery Vauxhall ('we', 'us', or 'our') collects, uses, stores, and protects personal information relating to anyone placing flower delivery orders in Vauxhall and the surrounding districts. Safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) is central to how we operate our business. This policy informs you, as our customer, about the key aspects of your data, our legal obligations, and your rights.

Scope and Application

This Privacy Policy applies to all customers who place orders for flower deliveries with Flower Delivery Vauxhall from Vauxhall and its neighbouring areas. By using our services, you acknowledge and agree to the terms set out in this document.

What Data We Collect

To fulfill flower delivery orders, we may collect the following categories of personal data:

  • Identity Data: name, title.
  • Contact Data: delivery address, billing address, telephone number, and any contact details you provide.
  • Order Information: details of your flower order, purchase history, delivery preferences, and occasion details (e.g., birthday, anniversary).
  • Payment Data: payment method, partial payment card details (never full card numbers or CVVs), and transaction details.
  • Correspondence Data: records of your communication with us (such as enquiries or feedback).
  • Technical Data: IP address, browser type and version, device information, and information about your interactions with our online ordering platform (such as cookies and usage logs as detailed in our separate cookie policy).

Lawful Basis for Processing

Under the GDPR, we are required to identify lawful grounds for collecting and processing personal information. We rely on the following lawful bases for our data processing:

  • Contractual Necessity: Processing your personal data is necessary for entering into and performing our contract with you, such as delivering your flower order, processing payments, and communicating order status.
  • Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services, handling customer complaints, and fraud prevention, provided your interests and rights do not override ours.
  • Legal Obligation: We may process and retain data to comply with statutory and regulatory requirements (for example, maintaining financial records for tax purposes).
  • Consent: In cases where you have expressly consented (such as for direct marketing beyond your order), we will process your personal data accordingly. You have the right to withdraw such consent at any time.

How We Use Your Data

We use your personal data for various legitimate purposes, including but not limited to:

  • Processing your flower order and delivering to the specified address
  • Notifying you about the status of your order
  • Responding to your enquiries or resolving complaints
  • Administering your payments and preventing fraud
  • Customising our services and communications to enhance your experience
  • Meeting legal, regulatory, and tax obligations
  • Improving our internal processes and customer service

Data Retention

We will retain your personal information for as long as is necessary to fulfill the purposes for which it is collected, including for satisfying any legal, accounting, or reporting requirements. Typically, customer records associated with transactions are retained for a minimum of six years to comply with statutory obligations, after which they are securely erased or anonymised. Where data is processed based only on your consent (such as for marketing), we retain it until you withdraw your consent.

Processors and Data Sharing

Your data may be processed by third-party service providers (‘processors’) whom we engage to assist in managing elements of our services, such as:

  • Payment service providers to securely process transactions
  • IT and software support companies providing secure platforms for ordering and communication
  • Couriers and delivery partners involved in fulfilling your order
  • Accountants and legal advisors for compliance purposes

All third-party processors are contractually bound to ensure adequate safeguards for your data and only process it under our instructions. We do not sell your personal information to any third party. Data transfers outside the European Economic Area (EEA) are only performed where adequate safeguards are in place, as mandated by the GDPR.

Your Rights Under GDPR

You have the following rights regarding your personal information under the GDPR:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can have inaccurate or incomplete data corrected.
  • Right to Erasure: You may request deletion of your data when it is no longer necessary for the specified purposes or when processing is based on consent.
  • Right to Restrict Processing: You may request a temporary halt to processing under certain circumstances.
  • Right to Data Portability: You can obtain and reuse your data for your own purposes across different services.
  • Right to Object: You can object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw this at any time.
  • Right to Lodge a Complaint: You can contact the appropriate data protection authority if you believe your rights have been breached.

Data Security

We implement suitable technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. Access to personal information is restricted to those employees, agents, and processors who need it to fulfil their service obligations, and all such parties are trained in maintaining data confidentiality and security.

Changes to This Policy

This Privacy Policy may be revised from time to time to reflect changes in the law, our operational practices, or new services. We encourage you to review this page periodically to remain informed about how we protect your information.

Contacting Us

If you have questions, requests, or concerns about this Privacy Policy or how your personal data is handled, please contact us using the details provided on our website’s contact page. We are committed to resolving your concerns and ensuring that your privacy is maintained.