Flower Delivery Thamesmead Privacy Policy

Introduction & Scope

This Privacy Policy explains how Flower Delivery Thamesmead collects, processes, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). It applies to all customers who place flower delivery orders with us within Thamesmead and its surrounding districts. By using our services, you agree to the collection and use of your data as described in this policy. Our commitment is to respect your privacy and safeguard your information.

What Data We Collect

To fulfil your orders and provide a tailored service, Flower Delivery Thamesmead collects the following types of personal data:

• Contact Information: Your name, address, delivery address (if different), and phone number.
• Order Details: Product selections, personalised messages, and delivery instructions.
• Payment Information: Payment card details are collected by our payment processors and are not stored by us directly.
• Account Information: If you create an account, we store your login credentials and order history.
• Communication Data: Any correspondence sent to us (via forms, post, or phone) regarding orders or customer service enquiries.
• Technical Data: IP address, browser type, and device information when using our website for analytical and security purposes.

The Lawful Basis for Processing Your Data

Under GDPR, we only process your personal data when there is a lawful basis to do so. For Flower Delivery Thamesmead orders, our processing relies on the following legal grounds:

• Contractual Necessity: Most data is processed to fulfil our contract with you, such as processing, confirming, and delivering your orders.
• Legal Obligation: For record-keeping, accounting, and to comply with applicable laws and regulations.
• Legitimate Interests: To respond to customer queries, improve our products and services, and prevent fraud, provided such interests are not overridden by your rights and interests.
• Consent: For processing that is not necessary for contract fulfilment or legal obligations, such as sending you marketing communications, we will seek your explicit consent, which you may withdraw at any time.

How We Use Your Data

Flower Delivery Thamesmead uses your personal data for the following purposes:

• To process, deliver, and communicate with you about your orders.
• To provide customer support and respond to your inquiries.
• To improve the quality of our website and services through analytics.
• To meet legal obligations, including tax and accounting requirements.
• To send you updates, service information, and (where you have consented) marketing material about our products and offers.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including to fulfil any legal, accounting, or reporting requirements. The retention periods depend on the nature of your relationship with us and statutory duties:

• Order and Transaction Data: Retained for up to 7 years to comply with legal and financial regulations.
• Customer Support Correspondence: Retained for up to 2 years after your last communication with us.
• Marketing Preferences: Maintained until you revoke your consent.

After expiry of the relevant retention period, your data will be securely deleted or anonymised.

Data Processors and Third Parties

To facilitate our operations and deliver services effectively, we may share your personal data with trusted data processors, each contractually bound to GDPR standards. These include:

• Payment service providers for secure transaction processing.
• IT service companies for website hosting, delivery management, and technical support.
• Delivery partners to fulfil your orders to your specified address.
• Professional advisers (such as accountants) as required by law.

We ensure all third-party processors process your data securely and only as necessary for the specified purpose. We do not sell or share your personal data with any third parties for their own direct marketing purposes.

Your Data Protection Rights

If you are an individual residing in Thamesmead or surrounding districts and place orders with us, you have the following rights regarding your personal data under GDPR:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of any inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you can request deletion of your data.
• Right to Restrict Processing: You can ask us to suspend processing of your data under certain conditions.
• Right to Data Portability: You can request transfer of your data to another provider.
• Right to Object: You may object to processing where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw this at any time.

To exercise any of these rights, please contact us using the methods provided on our website. We may need to verify your identity before acting on your request.

Security of Your Data

Flower Delivery Thamesmead is committed to ensuring the security of your data. We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. Despite these safeguards, no method of internet transmission or electronic storage is completely secure. We recommend that you keep your account information and passwords confidential.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our processing or legal requirements. The updated policy will be published on our website and will apply from the effective date shown. Please check this page regularly to stay informed about how we protect your information.

Contact Information

If you have any questions or concerns about this Privacy Policy or our handling of your data, please get in touch using the contact methods provided on our website. We will endeavour to address your queries promptly and in accordance with GDPR.