Flower Delivery Forest Gate Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Forest Gate collects, uses, stores, and protects the personal data of customers placing orders from Forest Gate and the surrounding districts. Our commitment is to maintain your privacy in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws of the United Kingdom.

Scope of the Policy

This policy applies to all individuals who place Flower Delivery Forest Gate orders for products or services in Forest Gate and neighbouring areas. By placing an order with us, you acknowledge and consent to the data practices described in this policy.

What Data We Collect

When you use our service or visit our website, we may collect the following types of data:

• Identity Information: Name, surname, and, where required, proof of identification if necessary to fulfil your order or meet legal requirements.
• Contact Information: Delivery address, billing address, phone number, and, where supplied, email address.
• Order Information: Details of the products or arrangements you purchase, order history, delivery instructions, and correspondence related to your order.
• Payment Information: Payment method details such as card type, masked card numbers, and transaction references. We do not store full card numbers or CVV codes, as payments are processed through secure third-party payment providers.
• Communication Data: Records of communications with you, including feedback, queries, and customer service requests.
• Technical Data: When visiting our website, we may collect your IP address, browser type, device type, and usage data through cookies or similar technologies, for website functionality, analytics, and security purposes.

Lawful Basis for Processing Your Data

We process personal data under the following lawful bases as defined in Article 6 of the GDPR:

• Contractual Necessity: To fulfil our obligations under the agreement when you place an order, such as processing payments, delivering orders, and communicating order status.
• Legitimate Interests: To improve our services, manage customer relationships, prevent fraud, and ensure network and information security, provided these interests are not overridden by your rights.
• Legal Obligations: To comply with applicable laws, such as tax, accounting, or anti-money laundering regulations.
• Consent: Where we seek your explicit permission for specific activities, such as sending marketing communications (which you may opt out from at any time).

How We Use Your Data

Your data is used strictly for purposes relevant to providing and improving our flower delivery services, including:

• Processing and delivering your orders efficiently and accurately
• Communicating order updates, confirmations, or issues
• Providing customer support and resolving disputes
• Sending service-related notifications
• Improving our website, services, and customer experience
• Fulfilling administrative or legal obligations

Data Retention

We retain personal data only for the duration necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. Typically:

• Order and Transaction Data: Retained for up to 7 years to comply with accounting, taxation, and legal requirements.
• Technical and Analytical Data: Retained for up to 2 years for security and service improvement purposes.
• Marketing Data: Retained until you opt out or withdraw consent.
• Customer Service Communications: Retained for 3 years after the resolution of your enquiry or complaint.

Processors and Data Sharing

To provide our services, we rely on selected external service providers (data processors), who process data on our behalf and strictly under our instructions. These include:

• Payment Processors: For secure electronic payments and fraud prevention.
• IT and Web Hosting Partners: For online services, website operation, and data storage solutions.
• Delivery Partners: To facilitate the delivery of orders to your chosen address.
• Analytics Providers: To monitor website performance and enhance user experience.

All processors are carefully selected for their respect for data protection obligations and are contractually bound to maintain the confidentiality and security of your personal data. We do not sell or rent your personal data to third parties. If we are legally obliged to disclose your data to public authorities, this will be done in compliance with all applicable data protection regulations.

Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• The right to access – You may request a copy of the personal data we hold about you.
• The right to rectification – You can ask us to correct incomplete or inaccurate data.
• The right to erasure – In certain circumstances, you may request that we delete your data.
• The right to restrict processing – Under specific conditions, you can ask us to stop processing your data.
• The right to data portability – You can request to receive your data in a commonly used, machine-readable format or that it be transmitted to another provider.
• The right to object – You may object to the processing of your data in certain situations, for instance, for direct marketing.
• The right to withdraw consent – Where processing is based on your consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

If you wish to exercise any of these rights, please contact us through the means available on our website. We may need to verify your identity before acting on your request.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. These include physical security procedures, restricted access controls, encrypted payment processing, regular security reviews, and staff data protection training.

Changes to This Privacy Policy

This Privacy Policy is subject to review and may be updated from time to time to reflect changes to our data practices or legal requirements. The most current version will always be available on our website, with a date of last update.

Contact and Further Information

If you have any questions or concerns regarding this Privacy Policy, how your personal data is handled, or to make requests regarding your rights, please contact us by using the contact information found on our website. We are committed to addressing your queries promptly and transparently.