Flower Delivery Gants Hill Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Gants Hill collects, processes, stores, and protects your personal data when you place orders with us from Gants Hill and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring your privacy and data security at all stages of our service.

Scope of This Privacy Policy

This policy applies to all customers placing flower delivery orders with Flower Delivery Gants Hill for deliveries within Gants Hill and neighbouring areas. By using our website or contacting us to place an order, you agree to the collection and processing of your personal information as described in this policy.

What Personal Data We Collect

To provide and improve our flower delivery services, we may collect the following categories of personal data:

• Contact Information: such as your name, address, email, and phone number.
• Recipient Details: including recipient name, delivery address, and contact information needed for successful deliveries.
• Order Information: details of your purchased products, delivery instructions, payment information (processed securely by payment providers).
• Correspondence: messages, notes, or feedback provided to us through telephone calls, our website, or other communications.
• Technical Data: such as IP address, browser type, access times, and pages viewed, to help us improve our website functionality and security.

Lawful Basis for Processing Your Data

For each type of data collected, we ensure a lawful basis for its use under GDPR:

• Contractual necessity: We process your personal and recipient data to fulfill your order and deliver flowers as requested.
• Legal obligations: Some data may be retained for compliance with financial, tax, or regulatory requirements.
• Legitimate interests: We may use limited data to ensure our services run effectively, improve our offerings, prevent fraud, and handle customer support.
• Consent: If we wish to send you marketing communications beyond direct order follow-up, we will obtain your explicit consent, which you may withdraw at any time.

How We Use and Share Your Personal Data

Your personal data is used exclusively to process orders, deliver flowers, and handle any queries relating to your order. Specifically, we use your data to:

• Fulfill your flower delivery order accurately and promptly.
• Contact you regarding order confirmations, delivery status, and any issues that arise.
• Comply with our legal accounting and tax requirements.
• Improve our services by analyzing aggregated technical information about website usage.

We do not sell or lease your information. We only share relevant personal data with third parties who act as data processors strictly for the purposes outlined here.

Our Data Processors

We may engage trusted third-party service providers to support our business operations. These data processors may include:

• Payment processing companies: to securely handle your payment transactions.
• IT and website hosting providers: to maintain and protect our online platform.
• Courier and delivery partners: to ensure proper and timely delivery of your orders.

We carefully vet all data processors to ensure they comply with GDPR and protect your information in accordance with our strict privacy standards.

Data Retention

We retain personal data only as long as necessary for our business to operate, comply with our legal obligations, and resolve disputes. Specifically:

• Order and delivery records are typically stored for up to six years to meet accounting, auditing, and tax requirements.
• Data related to unsuccessful orders or general enquiries is retained for a shorter period, usually up to one year, unless further retention is justified by ongoing issues or legal needs.
• Technical and analytical data is stored only as long as necessary to enhance our website and services, and is anonymized wherever possible.

Your Rights Under GDPR

As a customer of Flower Delivery Gants Hill, you have important rights concerning your personal information. You can:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data when it is no longer required for the purposes it was collected, unless we are legally obligated to retain it.
• Restriction: Request restriction of processing in certain situations.
• Objection: Object to the processing of your data where our legitimate interests are used as a basis.
• Portability: Request transfer of your personal data to another provider in a commonly used format.
• Withdraw consent: Where consent is the basis for processing (such as for marketing), you may withdraw this at any time.

To exercise any of your rights, please contact us using the details provided on our website or by post. We may need to verify your identity to process your request.

Security of Your Data

We implement appropriate security measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure. Our website uses secure technology, and we limit access to your data to only those staff and processors who require it to perform their roles.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal changes, best practices, or changes in our services. The latest version will be made available on our website. We encourage you to review this policy regularly to stay informed.

Contacting Us

If you have any questions, requests, or concerns about this Privacy Policy or the way we handle your personal information, please use the contact details provided on our website. We are committed to addressing your enquiries and upholding your privacy rights.