Privacy Policy for Flower Delivery Raynes Park

Scope of This Privacy Policy

This Privacy Policy describes how Flower Delivery Raynes Park collects, uses, stores, and protects the personal data of customers placing orders from Raynes Park and surrounding districts. We are committed to complying with the UK General Data Protection Regulation (GDPR) and ensuring your data is handled lawfully and transparently. This policy applies to all customers interacting with us through our website, phone, or in person for flower delivery services.

What Personal Data We Collect

When you place an order or interact with our services, we may collect the following categories of personal data:

• Contact Information: Your name, address, postcode, phone number, and (if provided) email address.
• Recipient Details: Name, delivery address, and phone number of your chosen recipient (if applicable).
• Order Details: Details about the flowers or products you purchase, delivery instructions, and any personal message you include.
• Payment Details: Transaction information (excluding full card details, which are processed securely by our payment processors).
• Technical Data: IP address, browser type, and device information collected through cookies or similar technologies to enhance site functionality and security.

Lawful Basis for Processing Data

We process your personal information based on the following lawful grounds under GDPR:

• Contractual Necessity: To process, fulfill, and deliver your order, as well as to communicate important order updates.
• Legitimate Interests: To enhance our services, respond to your enquiries, handle complaints, prevent fraud, and ensure the security of our website and operations.
• Legal Obligations: To comply with legal or regulatory requirements applicable to our business.
• Consent: For marketing communications, which you may opt into separately and withdraw at any time.

How We Use Your Personal Data

Personal data is used for the following purposes:

• Processing and delivering your orders efficiently and accurately;
• Contacting you about your order or to clarify any delivery instructions;
• Notifying recipients of deliveries when relevant;
• Processing payments securely through trusted third-party payment providers;
• Improving our website’s user experience and troubleshooting technical issues;
• Complying with record-keeping, accounting, and legal requirements;
• Sending marketing or promotional information (only with your consent).

Sharing Your Data: Data Processors and Third Parties

We share your data only with select third parties where necessary to serve our customers and fulfil our contractual and legal obligations. These include:

• Payment Processors: Reputable providers who securely process payment information;
• Delivery Partners: Couriers or drivers responsible for delivering your order within Raynes Park and surrounding districts;
• IT and Website Providers: Trusted partners who support our website infrastructure, digital security, and email communications;
• Regulatory or Law Enforcement: Where required by law, we may disclose your data to governmental bodies or regulators.

All third-party processors are required to maintain adequate safeguards and process your personal data only in accordance with our instructions and applicable law. We do not share or sell your information with unrelated marketing companies.

Data Retention: How Long We Keep Your Data

Your personal data is retained only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law (such as tax or accounting regulations). Generally, we will keep:

• Order and transactional data for up to six years from your order date to comply with statutory record-keeping obligations.
• Contact and communication data for as long as reasonably necessary to address queries or complaints.
• Marketing consent records for as long as you are subscribed or until you withdraw consent.

At the end of relevant retention periods, your data will be securely deleted or anonymised so that it can no longer be linked to you.

Your Rights as a Data Subject

Under the UK GDPR, you have a number of rights regarding your personal data. These include:

• Right of Access: You can request details of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): In certain circumstances, you can request your data to be deleted.
• Right to Restrict Processing: You can ask us to restrict the use of your data in some situations.
• Right to Data Portability: Where applicable, you may request your data in a machine-readable format for transfer to another provider.
• Right to Object: You may object to certain processing activities (such as direct marketing) at any time.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us through our designated contact method on our website. We have a process in place to respond to all valid requests within the time limits required by law. You are also entitled to lodge a complaint with the supervisory authority if you believe your data has not been managed lawfully.

How We Protect Your Personal Data

We are committed to securing your personal information. We have implemented appropriate technical and organisational measures to prevent unauthorised access, loss, or disclosure of your data. These measures include secure servers, encrypted communications, and restricted access to personal data only by authorised personnel and contractors.

Updates to Our Privacy Policy

We may update this Privacy Policy from time to time in response to legal, regulatory, or operational developments. The most current version will always be available on our website. Please review it regularly to stay informed about how we protect your data.

Contact Us

If you have any questions about this Privacy Policy or how Flower Delivery Raynes Park manages your personal data, please consult our website for our current contact details. We are happy to support your privacy and handle any concerns with transparency and care.