Privacy Policy for Flower Delivery Homerton Customers

Introduction

At Flower Delivery Homerton, the privacy and security of your personal data is of paramount importance to us. This Privacy Policy sets out how we collect, use, store, and protect your information when you place orders with us from Homerton and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. Please read this policy carefully to understand your rights and how we look after your personal data.

Scope of This Policy

This Policy applies to all customers who order flower deliveries from Flower Delivery Homerton, whether via our website, by phone, or in person, in Homerton and neighbouring areas. By placing an order, you agree to the terms outlined here regarding the collection and use of your personal data.

What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, surname, and where required, title.
• Contact Data: Delivery address, billing address, postcode, phone number, and other contact details necessary for order fulfilment.
• Order Details: Information related to your flower order (such as product, quantity, special instructions, messages for recipients, delivery date).
• Payment Data: Transaction amount, payment method (such as credit or debit card type; no card details are stored by us directly unless otherwise stated).
• Technical Data: IP address, browser type, device type, and other technical information when you interact with our online services.
• Marketing Data: Preferences for receiving marketing communications from us.

We do not collect special categories of personal data (such as health information) unless you expressly provide this as part of a special instruction and it is necessary to fulfil your order.

How We Collect Your Data

Your data is collected directly from you when you:

• Place an order via our website, over the phone, or in our store.
• Contact us for customer service or with any queries.
• Subscribe to our marketing communications or provide feedback.

Some technical data is collected automatically through cookies or similar technologies when you visit our website, to improve your browsing experience and for analytics.

Lawful Basis for Processing

We process your personal data based on the following lawful bases under GDPR:

• Contractual Necessity: To process and fulfil your order and provide customer service.
• Legal Obligation: To meet our legal and regulatory obligations (such as tax, accounting, and anti-fraud requirements).
• Legitimate Interests: For business operations, process improvements, and quality control (for instance, analysing order data to improve our services).
• Consent: For marketing communications, we rely on your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your data may be used for the following purposes:

• To process, deliver, and complete your order.
• To communicate with you about your order.
• To process refunds, exchanges, or queries you may have.
• To maintain our business records and comply with our legal obligations.
• To improve our products and services based on feedback and analysis.
• To send you marketing communications if you have opted in.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Typically, order and transaction records are retained for six years. Marketing preferences are retained until you unsubscribe or withdraw consent. After the applicable retention period, personal data is securely deleted or anonymised.

Data Processors and Third Parties

We may share your data with trusted third parties (processors) who provide essential services on our behalf, such as:

• Payment service providers who process your payment securely.
• IT and website hosting providers who maintain our systems.
• Delivery partners who help us deliver flowers to you or your recipient.
• Professional advisers (such as accountants and legal advisers) where required.

All third parties are required to process your data in accordance with this policy, GDPR requirements, and under appropriate confidentiality and security obligations. We do not sell your personal data to third parties.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request to correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to any legal obligations to retain certain information.
• Right to Restrict Processing: Ask us to limit the processing of your data.
• Right to Data Portability: Request transfer of your data to another service provider.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Withdraw consent to marketing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights, please contact us. We may need to verify your identity before fulfilling your request for your security and privacy protection.

International Transfers

Your personal data is generally stored and processed within the United Kingdom or the European Economic Area (EEA). If our suppliers need to transfer data outside these areas, we ensure that suitable safeguards are in place, such as Standard Contractual Clauses, to protect your information.

Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or destruction. These measures include secure servers, encryption, and restricted access.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, regulatory updates, or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and where appropriate, notified to you in other ways.

Contact and Complaints

If you have questions about this Privacy Policy or are unhappy with our use of your personal data, please contact us using the information provided on our website. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have not been respected.