Privacy Policy for Worcester Park Flower Delivery Customers

Introduction

This Privacy Policy describes how Flower Delivery Worcester Park collects, processes, stores, and safeguards your personal information in accordance with the General Data Protection Regulation (GDPR). This policy is relevant to all individuals and customers who place orders with Flower Delivery Worcester Park from Worcester Park and surrounding districts. We are committed to ensuring your privacy and data protection rights are respected throughout your interactions with our services.

Data We Collect

We collect the following categories of personal data when you place an order, make an inquiry, or interact with Flower Delivery Worcester Park:

• Identity Data: Full name, title, and possibly your date of birth (when verifying agelimited sales).
• Contact Data: Delivery address, billing address, postcode, telephone numbers, and delivery recipient details where applicable.
• Order Information: Details of your orders, including products purchased, delivery instructions, occasion, and message card content.
• Payment Data: Payment transaction details; please note, we do not store full credit or debit card numbers, but our payment processors may securely handle your card data in compliance with PCI DSS standards.
• Technical Data: IP address, browser type and version, device information, time zone setting, and cookies or similar technologies used on our website.
• Communication Data: Any correspondence with us, including feedback, reviews, or queries you submit.

Lawful Basis for Processing Your Data

Under GDPR, we process your personal data on the following lawful bases:

• Contractual Necessity: To fulfil our obligations to you when you order flowers or related products, including order processing, delivery, and customer service queries.
• Legal Obligation: To comply with applicable UK laws, including tax and accounting requirements, and to maintain accurate business records.
• Legitimate Interests: To improve our services, ensure website security, provide customer support, and conduct limited marketing for similar goods and services to existing customers (you may opt out at any time).
• Consent: Where required, we will ask for your consent before sending marketing communications or where we rely on analytics or cookies for non-essential website functions. You have the right to withdraw consent at any time.

How We Use Your Information

Flower Delivery Worcester Park uses your information for the following purposes:

• Processing, confirming, and fulfilling your flower and gift orders.
• Contacting you regarding your order, any delivery issues, or customer service matters.
• Providing information about your account or responding to your queries.
• Improving our website functionality and user experience.
• Fulfilling our legal and regulatory obligations.
• Maintaining accurate records for financial and administrative purposes.
• Sending relevant service updates or marketing communications (if you have agreed).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, this is up to six years after your order is completed, in line with statutory limitations for accounting and taxation. Data retained for marketing will be held only with your active consent or until you withdraw your consent.

Processors and Third Parties

To deliver our services, we use a number of trusted third-party service providers (processors) who act on our instructions and process personal data on our behalf. These may include:

• Payment gateway providers for secure transaction processing.
• IT service providers for website hosting, maintenance, and security.
• Delivery partners for fulfilling physical delivery of flowers and goods.
• Customer feedback and review collection partners.

All processors are contractually obliged to handle your data securely and are prohibited from using your data for their own purposes. If required by law, your information may also be disclosed to government or regulatory authorities.

User Rights Under GDPR

You have several important rights under the GDPR regarding your personal data. These include:

• Right to Access: Obtain confirmation as to whether we are processing your personal data and request a copy of the information held.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data in certain circumstances, such as where it is no longer needed for the purposes collected.
• Right to Restriction: Ask us to restrict processing in limited cases, for example, if you contest the accuracy of your data.
• Right to Data Portability: Request your data be provided to you or to another organisation in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests (including marketing). We will stop processing unless we have overriding legitimate grounds.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.
• Right to Lodge a Complaint: Raise any complaints with the UK Information Commissioner's Office (ICO) if you are dissatisfied with how your personal data is handled.

To exercise your rights, please contact us using the contact methods published on our website. We may require you to verify your identity before actioning your request.

Data Security

We take your data security seriously. Flower Delivery Worcester Park implements appropriate technical and organisational measures to safeguard your personal information against unauthorised access, loss, or destruction. This includes secure servers, encryption where applicable, and regular review of data security procedures.

International Transfers

Your data is primarily processed within the UK and European Economic Area (EEA). If any data processor handles your data outside the EEA, we ensure that appropriate safeguards are in place (such as standard contractual clauses) to protect your rights in accordance with GDPR requirements.

Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect or process personal data of children.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our data processing practices. The latest version will always be published on our website, and material changes may be notified to you where appropriate.

Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding your personal information, you can reach out to us using the contact information provided on our website.

This policy is effective as of 1 June 2024 and applies to all orders and enquiries from Worcester Park and the surrounding districts.