Privacy Policy Overview for Flower Delivery West Kensington

Introduction

This Privacy Policy describes how Flower Delivery West Kensington ("we", "our", or "us") collects, processes, stores, and protects your personal data when you place an order for flower delivery in West Kensington and the surrounding districts. As an organization committed to upholding data privacy and protection, we comply with the UK General Data Protection Regulation (UK GDPR) and other applicable legislation. This policy is intended for all customers who place a Flower Delivery West Kensington order and outlines your data rights and our responsibilities concerning your personal information.

What Data We Collect

To process and deliver your flower orders efficiently and provide a high-quality customer experience, we collect certain personal data. This may include:

• Contact details: Name, delivery address, billing address (if different), phone number.
• Order information: Product selections, any notes or card messages you provide, recipient information (name, address, phone number).
• Payment details: Payment card data provided for transaction processing (handled by secure payment processors).
• Communication records: Details of correspondence via our website or platform, including customer service inquiries, complaints, and reviews.
• Technical data: IP address, browser type, operating system, and browsing activity on our website (collected via cookies and similar technologies for functionality and analytics).

Lawful Basis for Data Processing

We only process your personal data where permitted by law, relying on the following lawful bases under the UK GDPR:

• Contractual necessity: Most of your information is processed to fulfil your flower delivery order or to take steps at your request prior to entering into a contract (for example, providing a quote or estimating delivery times).
• Legal obligation: We may need to process data for compliance with legal or regulatory requirements, such as tax or antifraud laws.
• Legitimate interests: Some data is used for our legitimate business interests, such as improving service quality, staff training, and ensuring the security of our systems. We ensure any such use does not override your own rights and interests.
• Consent: Where required by law, such as for direct marketing via email or use of non-essential cookies, we will process your data only with your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is used solely for the purposes it was collected. These purposes include:

• Processing, fulfilling, and delivering your flower order to the specified address.
• Taking payment and preventing fraudulent transactions (payment data is securely handled and never retained by us beyond what is necessary).
• Communicating order statuses, confirmations, and any issues that arise with your order.
• Improving the functionality and user experience of our website, including analytics and troubleshooting.
• Complying with our legal and regulatory obligations.

Data Retention

We retain your personal data only as long as is necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:

• Order and transaction data is kept for up to six years to comply with tax and legal requirements.
• Communication records relating to your orders are kept for up to three years for audit and customer service training.
• Limited contact and order data may be retained for up to three years for legitimate business interests, such as managing repeat business, unless you request erasure.
• Technical and analytics data (such as those gathered by cookies) are kept in line with our cookie retention policy, generally up to two years or as otherwise required by law or platform settings.

When personal data is no longer needed, we securely delete or anonymize it.

Data Processors and Sharing

We may use third-party service providers ("processors") to assist with fulfilling your order, processing payments, providing IT support, and website analytics. All processors are contractually bound to protect your data and only act under our instructions. Our main data processors include:

• Payment service providers for handling online payments securely.
• Courier or delivery service partners, but only to the extent necessary to complete delivery.
• IT, website hosting, and email service providers.
• Customer service management software platforms.

We do not sell your personal data or share it with any third parties for their own marketing purposes.

International Data Transfers

We primarily process your personal data within the United Kingdom. However, if any transfer of your data outside the UK or European Economic Area (EEA) is required, it will only take place where adequate safeguards are in place to protect your information in compliance with data protection law.

User Rights Under GDPR

As a customer, you have various rights under the GDPR regarding your personal data, including:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct or update your information if it is inaccurate or incomplete.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data.
• Right to restrict processing: You may ask us to limit the processing of your data in certain cases.
• Right to data portability: You can obtain your data in a structured, commonly used format for reuse elsewhere.
• Right to object: You may object to the processing of your data where we rely on our legitimate interests.
• Right to withdraw consent: Where consent is the basis for processing, you can withdraw your consent at any time.
• Right to lodge a complaint: You have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been mishandled.

To exercise your rights, please contact us using our usual communication channels. We will respond to any legitimate request within one calendar month, subject to verification of identity.

Changes to Our Privacy Policy

We may review and update this Privacy Policy from time to time. If we make material changes, we will notify customers placing orders in West Kensington and nearby districts through prominent notices on our website or at the point of placing an order. We encourage you to revisit this page periodically to stay informed about how we protect your privacy.

Contact and Further Information

If you have any queries regarding this Privacy Policy or how Flower Delivery West Kensington handles your personal data, please contact us via the contact methods provided on our website. We are committed to investigating and resolving any privacy concerns promptly and transparently.