Our Commitment to Your Privacy – Flower Delivery Canonbury

Privacy Policy Overview

This Privacy Policy describes how Flower Delivery Canonbury collects, uses, retains, and safeguards personal data relating to all customers placing orders from Canonbury and its surrounding districts. It also outlines your rights under the General Data Protection Regulation (GDPR). By placing an order with Flower Delivery Canonbury, you confirm that you have read and understood this policy.

Data We Collect

To fulfil your orders and provide an efficient service, Flower Delivery Canonbury collects various types of personal data. The specific data collected may include:

• Contact Information: Name, delivery address, billing address, phone number, and, if provided, special delivery instructions.
• Order Information: Details of products ordered, dates, and any personal messages included with flowers.
• Payment Information: Transaction details such as payment method. (Note: Sensitive payment data such as credit card numbers are handled securely by payment processors and are not stored by us.)
• Communication Data: Any correspondence with customer service representatives, including feedback or inquiries.

Lawful Basis for Processing

We rely on the following lawful bases under Article 6 of the GDPR to process your personal data:

• Contractual Necessity: Processing is necessary for the performance of your order (e.g., delivering flowers, processing payments, contacting you about your delivery).
• Legal Obligation: We may process your data as required to comply with legal and regulatory requirements (e.g., accounting, tax).
• Legitimate Interests: We have a legitimate interest in enhancing our services, resolving queries, and managing administrative operations. Where these interests do not override your fundamental rights, we may process your information for these purposes.
• Consent: In certain cases, such as marketing communications, we will seek your express consent before processing your data. You may withdraw your consent at any time.

Use of Personal Data

Your personal data is used strictly within the boundaries of this Privacy Policy for purposes including:

• Processing, fulfilling, and delivering your flower orders
• Processing payments and managing billing matters
• Responding to customer service queries or requests
• Improving our services (such as quality control and service feedback)
• Fulfilling our legal and regulatory obligations
• Communicating offers or service updates, but only where you have expressly consented to receive such information

How We Store and Retain Your Data

Your personal data is stored securely and only for as long as necessary to fulfil the purposes outlined above, or as required by applicable laws and regulations. Our retention periods are:

• Order and contact data: Retained for up to 7 years to comply with invoicing and accounting regulations.
• Customer service correspondence: Kept for up to 2 years following your last interaction with us.
• Marketing consent data: Retained until you withdraw consent or request deletion.

After these periods, your data is securely deleted or anonymised.

Processors and Third Parties

To deliver our services, we engage reputable data processors and service providers, including:

• Payment processors: Handle secure payment transactions.
• Courier and delivery partners: Enable the prompt and accurate delivery of orders.
• Customer service platforms: Facilitate efficient communication and support.
• IT and hosting providers: Store and safeguard your data through secure digital infrastructure.

Each third-party processor acts only on our instructions, is bound by data protection agreements, and must comply with GDPR. We do not sell, trade, or rent your data to third parties for their own marketing purposes.

Your Rights

Under GDPR, you have important rights relating to your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to have inaccurate or incomplete data corrected.
• Right to Erasure: You can request deletion of your personal data, subject to certain legal obligations.
• Right to Restrict Processing: You can request that we limit the way we use your data.
• Right to Object: You may object to certain types of processing, such as direct marketing.
• Right to Data Portability: You can ask us to transfer your data to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us via written request. We may require you to verify your identity prior to fulfilling your request in order to safeguard your information.

Security Measures

We take the security of your data seriously. Flower Delivery Canonbury has implemented physical, electronic, and managerial procedures to protect your data from unauthorised access, loss, misuse, alteration, or disclosure. Only personnel and processors with a direct need have access to your personal information, and all are subject to strict confidentiality obligations.

International Data Transfers

Your data is generally stored and processed within the UK and European Economic Area (EEA). In rare cases where data is processed outside the EEA, we ensure appropriate safeguards and GDPR-compliant measures are in place to protect your privacy rights.

Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please notify us so we can take appropriate action.

Policy Updates

This Privacy Policy may be reviewed and updated from time to time to reflect changes in our practices or legal requirements. The "last updated" date will be indicated at the end of this document. Continued use of our services after changes have been made constitutes acceptance of those changes.

Last updated: June 2024