Privacy Policy for Flower Delivery Earlsfield Customers

Scope of the Privacy Policy

This Privacy Policy applies to all customers who place orders with Flower Delivery Earlsfield, whether you are located in Earlsfield or any surrounding districts. By using our services, you acknowledge and agree to the collection and use of your personal data as described in this document. Protecting your personal information and privacy is of paramount importance to us. Please read this policy carefully to understand how we handle your data in accordance with the General Data Protection Regulation (GDPR).

Personal Data We Collect

When you interact with Flower Delivery Earlsfield, we collect and process various types of personal data necessary to fulfill your order and improve your experience. The types of information we may collect include:

• Identity Data: Name, surname, and title of you (the customer) and the recipient (if different from you).
• Contact Data: Delivery and billing address, contact number, and any delivery instructions you provide.
• Transactional Data: Details of your orders, payment method (note we do not store full payment card details), purchase history, and correspondence regarding your orders.
• Technical Data: IP address, browser type, device information, and access times when you use our website.
• Marketing Preferences: If you subscribe to our newsletter or promotions, your communication preferences.

We do not intentionally collect special categories of personal data (such as health-related information, ethnicity, or political opinions) unless specifically required and provided by you, for example, explicit allergy notifications relating to your order.

Lawful Basis for Processing

We process your personal data only when permitted by law. The lawful bases upon which we rely are:

• Performance of Contract: The majority of personal information we process is necessary for the fulfillment of a contract with you, namely, processing and delivering your flower orders.
• Legal Obligation: We may process your data to comply with a legal requirement, such as record-keeping for tax purposes.
• Legitimate Interests: Processing for our legitimate business purposes, such as improving services, addressing customer queries, or undertaking limited direct marketing to existing customers (you can opt out at any time).
• Consent: We will ask for your consent before sending you promotional emails or where we need to process data for other reasons not covered above. You may withdraw your consent at any time.

How We Use Your Data

Flower Delivery Earlsfield uses your data for the following purposes:

• Processing, fulfilling, and delivering your flower orders;
• Communicating with you regarding your orders and responding to customer service requests;
• Providing order confirmations, delivery updates, and related notifications;
• Improving our products, services, and website functionality through analytical data;
• Complying with our legal and regulatory obligations;
• With your consent, delivering marketing communications and offers.

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements. The retention periods are as follows:

• Order and Transaction Data: Retained for up to 7 years to comply with tax and legal obligations.
• Marketing Preferences: Retained until you withdraw your consent or unsubscribe from communications.
• Website Usage Data: Retained for up to 26 months for analytical purposes.

Once data is no longer required, it is securely deleted or anonymised where possible.

Data Processors and Third Parties

In the course of our operations, we may share your data with trusted third-party service providers acting as data ‘processors’. These may include:

• Delivery partners who transport your flowers to addresses in Earlsfield and nearby districts;
• Payment processors who securely manage your card transactions;
• IT and hosting providers that support our website and databases;
• Email and SMS communication platforms for order confirmations and updates;
• Professional advisors and legal authorities where required by law.

All processors are contractually obligated to keep your information confidential, process data only in accordance with our instructions, and comply with data protection laws. We do not sell or share your personal data with any other companies for unrelated marketing purposes.

International Transfers

Your personal data is primarily processed within the UK or the European Economic Area (EEA). If data is transferred outside these areas, we ensure it is protected using methods recognised by the GDPR, such as Standard Contractual Clauses or adequacy decisions.

User Rights Under GDPR

As a customer of Flower Delivery Earlsfield, you have the following rights regarding your personal information:

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Ask for corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where appropriate (for example, when data is no longer needed).
• Right to Restrict Processing: Ask us to restrict specific data processing.
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format or have it sent to another data controller.
• Right to Object: Object to processing where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time.

To exercise any of these rights, please contact us using the details provided on our website. We will respond to all requests in accordance with GDPR requirements.

Security of Your Data

We implement robust technical and organisational measures to ensure your personal data is protected from unauthorised access, loss, misuse, or disclosure. Regular security audits, access permissions, encryption, and secure data backup systems are standard practice. While no system can guarantee absolute security, we continually update our policies and practices to safeguard your data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any future changes will be posted on this page with an updated revision date. Please revisit this page regularly to stay informed of how we protect your privacy.

Contact and Further Information

If you have questions about this Privacy Policy or any aspect of your personal data, please refer to our contact details provided on the website. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) should you feel your rights have not been adequately addressed.

This policy was last updated in June 2024.