Privacy Policy for Flower Delivery Harringay

Introduction

Flower Delivery Harringay (“we”, “us”, “our”) is dedicated to maintaining the privacy and protection of your personal information. This Privacy Policy outlines how we collect, use, retain, and safeguard your data when you place flower delivery orders with us in Harringay and the surrounding districts. Our practices adhere to the General Data Protection Regulation (GDPR) and other relevant UK data protection legislation.

Scope of This Policy

This Privacy Policy applies to all customers who submit personal data when ordering flower delivery services from Flower Delivery Harringay in Harringay and neighbouring areas. By placing an order, you acknowledge and consent to the collection, use, and processing of your data as described in this policy.

What Data We Collect

We collect and process different types of personal data to fulfill and improve our flower delivery services, including but not limited to:

• Identity Data: Name, title, and contact details of both the person placing the order and the intended recipient.
• Contact Data: Delivery address, billing address, and phone number (if applicable).
• Transaction Data: Payment card details (processed securely via third-party payment processors), order details, and transaction history.
• Communication Data: Records of communications with us, including messages, feedback, and queries related to your order.
• Technical Data: IP address, browser type, device information, and usage statistics collected automatically from our website.

We do not intentionally collect or process sensitive personal data (special category data) such as health information or data revealing racial or ethnic origin.

Lawful Basis for Processing

We process your personal data based on the following lawful bases as defined by the GDPR:

• Contractual Necessity: Processing is necessary to fulfill our contract with you, such as delivering your flower order or contacting you regarding your delivery.
• Legitimate Interests: We may process your data for legitimate business interests, such as improving our products and services, preventing fraud, or managing our relationship with you, provided these are not overridden by your rights and interests.
• Legal Obligation: In certain cases, we are required to process your data to comply with applicable laws and regulations.
• Consent: Where required, we will seek your explicit consent before processing your personal data for specific purposes, such as for direct marketing.

How We Use Your Personal Data

We use your personal data for the following purposes:

• Processing and delivering your flower orders, including communicating with you about your order status and delivery.
• Managing payments, fees, and charges securely.
• Maintaining and improving our website and services.
• Addressing your questions, requests, or complaints.
• Complying with legal, regulatory, or taxation requirements.
• Sending you service updates or marketing communications if you have consented to receive them. You can opt out at any time.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. Generally, your data related to orders and transactions is retained for up to six years after your last order to satisfy tax and legal obligations. Once the retention period expires, your data will be securely deleted or anonymised.

Data Processors and Sharing

To provide our services efficiently, we may share certain personal data with trusted third-party service providers (“data processors”), such as payment processors, delivery couriers, website hosts, and IT service providers. These entities process data on our behalf and are contractually obligated to maintain the security and confidentiality of your data in accordance with GDPR requirements. We will never sell or share your personal data with unauthorised third parties for their own marketing purposes.

Your Rights Under GDPR

As a customer, you have several rights regarding your personal data under the GDPR:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal information.
• Right to Erasure (“Right to Be Forgotten”): You have the right to request deletion of your data in certain circumstances.
• Right to Restrict Processing: You may ask us to suspend the processing of your data under specific conditions.
• Right to Data Portability: You can obtain and reuse your personal data across other services in a usable format.
• Right to Object: You have the right to object to our processing of your personal data where we rely on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using our website’s contact form. We will respond to your request within one month, as required by law.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration. These include data encryption, access controls, and secure data storage. While we take reasonable steps to ensure data security, no online transmission can be guaranteed completely secure. We continuously monitor and improve our security practices in line with legal and technological developments.

International Transfers

Your personal data is generally stored within the UK and the European Economic Area (EEA). If personal data is transferred outside the UK or EEA, we ensure adequate safeguards are in place as required by data protection laws, such as standard contractual clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The latest version will always be available on our website. We encourage you to review this policy regularly to stay informed about how we are protecting your data.

Contact and Complaints

If you have questions about this Privacy Policy or our data handling practices, please use our website’s contact form. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), if you believe your data protection rights have been violated.