Our Data Privacy Policy for Flower Delivery Cricklewood Orders

Introduction

This Privacy Policy explains how Flower Delivery Cricklewood collects, uses, retains, and protects your personal information as required by the General Data Protection Regulation (GDPR). It applies to all customers who place flower delivery orders in Cricklewood and surrounding districts. Your privacy and the security of your data are our highest priorities, and we are committed to handling your information fairly and lawfully.

What Personal Data We Collect

When you use our services to place a flower delivery order, we may collect the following types of personal information:

• Contact Information: Name, address, phone number, and other details necessary for order fulfilment and customer communication.
• Recipient Details: Name, delivery address, phone number, and special instructions for delivery.
• Order Details: Order history, preferences, and any messages or notes you include with your order.
• Payment Information: Payment method, payment status, and transaction identifiers.
• Communication Data: Records of any correspondence with us, such as inquiries or complaints.
• Technical Data: IP address and information about your use of our website, which may be collected through cookies or similar technologies.

Lawful Basis for Data Processing

Under GDPR, we are required to have a valid legal basis for processing your personal information. Flower Delivery Cricklewood relies on the following bases:

• Contractual necessity: To process and deliver your order, we must collect and use your contact and order information.
• Legitimate interests: We use your data to improve our services, engage in direct marketing relevant to your prior transactions, and ensure the safe operation of our services, provided these interests are not overridden by your data protection rights.
• Legal obligation: We may retain or share data where required to comply with applicable laws or regulations, such as record-keeping or anti-fraud obligations.
• Consent: Where you have given explicit consent, such as subscribing to receive promotional updates, we rely on consent as our basis for processing.

How We Use Your Data

Your data is only used for the purposes for which it was collected. Flower Delivery Cricklewood may process your personal data in order to:

• Facilitate and manage flower delivery orders in Cricklewood and nearby areas.
• Contact you regarding your orders, delivery arrangements, or requested services.
• Respond to inquiries or resolve complaints.
• Process payments and prevent fraudulent transactions.
• Send transactional notifications and, with your consent, marketing communication.
• Improve our website’s user experience and customer service offerings.

Data Retention

We retain your personal information only as long as is necessary for the purposes for which it was collected, to fulfil legal requirements, or as otherwise outlined below:

• Order information and related contact details will be retained for a period necessary to complete delivery and for any potential follow-up (such as resolving complaints or processing returns), typically up to seven years to comply with tax and accounting laws.
• Payment information is never stored in full by us; we use secure third-party processors for payment processing. Records of transactions (not including full card details) are retained as legally required.
• Personal data used for marketing purposes will be retained only until you withdraw your consent or opt out of such communications.
• After the expiry of retention periods, personal data is securely deleted or anonymized.

Data Sharing and Processors

Flower Delivery Cricklewood will not sell or rent your personal data. We do share your data with trusted partners and processors where necessary for the following reasons:

• Order fulfilment: Sharing recipient and delivery data with delivery drivers or partner florists only as needed for completing your order.
• Payment processing: Engaging secure third-party payment processors to handle payments, ensuring PCI DSS compliance.
• Website hosting and IT services: Working with specialist providers to maintain the security and functionality of our website and systems.
• Legal compliance: Disclosing information when required to comply with laws, court orders, or governmental requests.

All processors and third-party service providers are contractually bound to comply with data protection laws and to use your data only as instructed by us, maintaining its confidentiality and security.

How We Protect Your Data

We implement appropriate technical and organizational measures to safeguard your information against unauthorized access, accidental loss, destruction, or disclosure. Such measures include encrypted connections (SSL/TLS), secure data storage, access restrictions, staff training, and regular review of our data protection procedures.

Your Data Protection Rights

Under the GDPR, you have several important rights regarding your personal data:

• Right of Access: You may request confirmation of what personal data we process and receive a copy of your information.
• Right to Rectification: You can ask for incorrect or incomplete personal data to be corrected.
• Right to Erasure: You may request deletion of your personal data, subject to certain conditions and retention requirements.
• Right to Restrict Processing: You may object to or request a restriction on the processing of your data in certain situations.
• Right to Data Portability: You may request that your data is provided in a commonly used, machine-readable format and, where feasible, transferred to another data controller.
• Right to Object: You have the right to object to the processing of your data for certain purposes, such as direct marketing.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

If you wish to exercise any of these rights, or have any concerns about the way your data is being used, you may contact us using the provided methods on our website. We will respond to your requests in accordance with GDPR requirements and timeframes.

Policy Updates

Flower Delivery Cricklewood may update this Privacy Policy from time to time. When we do, we will update the date of the revision and post the updated version on our website. We encourage you to review this Policy periodically to remain informed about how we protect your personal information.

Contact and Complaints

If you have questions, wish to exercise your rights, or would like to make a complaint regarding your data privacy, please use the contact information provided on our website. You also have the right to complain to the relevant supervisory authority responsible for data protection in your jurisdiction.

This Policy is effective for all flower delivery orders placed with Flower Delivery Cricklewood in Cricklewood and surrounding districts, and complies with current GDPR requirements.