Our Commitment to Your Privacy: Flower Delivery Chingford

Introduction

This Privacy Policy explains how Flower Delivery Chingford collects, uses, stores, and protects your personal data when you place orders or interact with our services in Chingford and the surrounding districts. We are committed to processing your information responsibly and transparently, in full compliance with the General Data Protection Regulation (GDPR).

Scope of Policy

This Privacy Policy applies to all individuals who place orders for flower delivery with Flower Delivery Chingford, as well as those who interact with our website, customer service, or any other services we provide in Chingford and neighboring areas. By using our services, you consent to the collection and use of your personal data as described here.

What Personal Data We Collect

We collect personal data directly from you as part of your order process and when you interact with our customer services. The types of personal data we may collect include:

• Identification details: Your full name and, if applicable, company name.
• Contact information: Delivery address, billing address, telephone number, and other relevant contact details.
• Recipient information: Name, delivery address, and contact details of flower recipients as necessary for order fulfillment.
• Order details: Details of products or services ordered, delivery preferences, payment method (note: we do not store full payment card details).
• Communication data: Messages, special delivery instructions, and your correspondence with our team.
• Technical data: IP address, browser type, device details, and logs relating to your use of our website (as collected through cookies or other tracking technologies).

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to process your personal data. The key lawful bases relevant to Flower Delivery Chingford are:

• Contractual necessity: Processing your data is required to fulfill your flower delivery order and related services.
• Legal obligations: We may need to process and retain certain data to comply with financial, tax, and regulatory requirements.
• Legitimate interests: We may use your data to improve our services, address customer queries, and prevent fraud, as long as such use does not override your privacy rights.
• Consent: For certain types of marketing or non-essential cookies, we will seek your clear and explicit consent before processing your data for these purposes.

How We Use Your Personal Data

Your personal data is used solely for the purposes for which it is collected. This includes:

• Processing and managing flower delivery orders.
• Communicating with you about your order status, issues, or customer service inquiries.
• Processing payments and refunds (note: payment transactions are handled by secure payment processors; we do not store your complete payment details).
• Delivering flowers and gifts to recipients as instructed by you.
• Improving our services through feedback and, where permitted, occasional marketing communications (only with your explicit consent).
• Maintaining records for tax, accounting, and other legal obligations.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal and contractual obligations. Generally:

• Order-related data is kept for up to seven years, as required for tax and accounting compliance.
• Basic contact data and communication, if related to support queries, is retained for up to two years following resolution.
• If you have given consent for marketing, we will keep your relevant data for that purpose until you withdraw your consent.

Once data is no longer needed, it will be securely deleted or anonymized.

Processors and Data Sharing

Sometimes, we engage trusted third-party service providers (processors) to support our business operations. These may include:

• Payment processors (for secure handling of payment card transactions; we never store full card numbers).
• IT service providers, including website hosting and technical support.
• Delivery partners assisting with fulfillment in certain districts.

These providers have access only to the information necessary to perform their functions and are contractually required to process your data securely, confidentially, and in line with GDPR requirements. Your personal data will not be sold, rented, or shared with any third parties for their own independent use without your consent unless required by law.

Your data is stored and processed within the United Kingdom and the European Economic Area (EEA). If, in exceptional cases, data needs to be transferred outside the EEA, we will ensure appropriate safeguards are in place to maintain its protection.

Your Rights as a Data Subject

Under the GDPR, you have a number of rights regarding your personal data, including:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You have the right to correct or update inaccurate or incomplete data.
• Right to erasure: Also known as the "right to be forgotten," you may request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: You may request limitations on how we use your data under certain circumstances.
• Right to object: You have the right to object to certain types of processing, such as direct marketing.
• Right to data portability: You may request that your data be provided to you or another organisation in a structured, machine-readable format.
• Right to withdraw consent: Where processing relies on consent, you may withdraw it at any time.

To exercise your rights, please submit a request by contacting us through the channels provided on our website or during your interactions with customer service.

Security of Your Data

We take appropriate organisational and technical measures to protect your personal data against unauthorised access, alteration, disclosure, or loss. This includes secure access protocols, regular staff training, and limiting data access to authorised personnel only.

Policy Updates

From time to time, we may update this Privacy Policy to reflect changes in our practices or legal requirements. We encourage you to review this policy regularly to stay informed about how we protect your data. Significant updates will be communicated to you as appropriate.

Contact and Complaints

If you have questions regarding this Privacy Policy, your personal data, or wish to file a complaint about how your data is handled, please use the channels provided on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority if you believe your rights under GDPR have been infringed.