Privacy Policy for Flower Delivery Ickenham Customers

Introduction

This Privacy Policy sets out how Flower Delivery Ickenham (“we”, “our”, or “us”) collects, uses, and protects the personal information of our customers when they place orders with us. The policy applies to all customers using our flower delivery services within Ickenham and the surrounding districts. Protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) is central to our business practices.

The Data We Collect

We collect and process personal data to provide efficient flower delivery services. The information we may collect includes:

  • Personal Identifiers: Full name, delivery address, billing address, date of order, and contact details such as telephone number (if provided).
  • Order Details: Details about your order, including flower type, delivery instructions, message content, and preferred delivery date and time.
  • Payment Information: Transaction data (such as payment card details), though payment information is processed by third-party payment processors, and we do not store full card details.
  • Communication Data: Content of any communications you send us via contact forms, social media, or feedback forms.
  • Technical Data: IP address, device type, browser type and version, cookies, and other relevant technical information collected via our website, for analytic and security purposes.

Lawful Basis for Processing Data

Flower Delivery Ickenham processes your personal information in accordance with GDPR. The main lawful bases for our processing activities are:

  • Contract: Processing your data is essential to take steps before entering into a contract and to fulfil orders you place with us.
  • Legal Obligation: We may be required to process or retain certain information to comply with legal and regulatory obligations.
  • Legitimate Interests: We use your information where it is necessary for our legitimate interests (such as delivery confirmation or resolving customer queries), provided your rights and freedoms do not override those interests.
  • Consent: For specific uses, such as direct marketing or use of cookies for analytics, we rely on your explicit consent. You may withdraw consent at any time.

Retention of Data

We only retain your personal data for as long as is necessary for the purposes outlined in this Privacy Policy. Your data will be kept for different periods according to its category and legal requirements:

  • Order Records: Retained for up to 6 years to fulfil legal and accounting obligations.
  • Marketing Data: Held until you unsubscribe or withdraw consent.
  • Correspondence Data: Maintained for up to 2 years for customer service purposes.
  • When retention is no longer warranted, we securely destroy or anonymise your data.

Data Processors and Disclosure

We may share your personal data with trusted partners and service providers (“data processors”) only as necessary to fulfil orders and operate our business. These include:

  • Payment Processors: Handle secure processing of credit and debit card transactions. Card details are not stored by us.
  • Delivery Partners: Couriers and florists who require delivery information to fulfil your order.
  • IT Service Providers: Support our IT systems and software, including those providing website hosting and database management.
  • Legal and Regulatory Authorities: Where required for compliance with the law or to protect our customers and business.

All data processors act on our instructions and must adhere to strict confidentiality and data protection requirements. Your personal data will not be sold or distributed for marketing purposes without your explicit consent. We do not transfer customer data outside the United Kingdom or European Economic Area unless appropriate safeguards are in place.

Your Rights Under GDPR

As a data subject within the scope of the GDPR, you have the following rights regarding your personal information:

  • Right of Access: Request confirmation of whether we process your data and receive a copy of your personal information.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of personal data where there is no legal ground for continued processing.
  • Right to Restrict Processing: Ask us to limit processing of your data under certain circumstances.
  • Right to Data Portability: Receive your personal data in a structured, machine-readable format and have it transferred to another controller where feasible.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our designated data protection representative using the contact details provided during your transaction or on our website. We may require you to verify your identity before fulfilling your request to protect your privacy.

Security Measures

We take rigorous measures to protect your data from unauthorised access, use, loss, or disclosure. Our security includes physical, technical, and organisational safeguards such as encryption, access controls, and staff training. We review and update our security protocols regularly to address emerging threats.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updates will be published on our website. We encourage you to review this policy periodically to remain informed of how we handle your personal information.

Contact and Complaints

If you have any questions or concerns regarding your personal data or this Privacy Policy, please refer to the contact details provided in your order confirmation or on our website. If you believe your rights under data protection law have been violated, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

This policy was last updated on 20 May 2024 and applies to all customers in Ickenham and the surrounding districts who place flower delivery orders through Flower Delivery Ickenham.