Flower Delivery Charing Cross Privacy Policy

Introduction

At Flower Delivery Charing Cross, we are committed to safeguarding your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy outlines how we collect, use, store, and protect the information of all customers who place orders for flower delivery from Charing Cross and the surrounding districts. By using our services, you acknowledge the practices described in this policy.

What Data We Collect

To provide and enhance our flower delivery services, we may collect and process the following types of personal data from our customers:

• Personal Identification Information: Name, postal address, delivery address, and contact details such as telephone number.
• Order and Transaction Information: Details about your purchases, order history, payment method (note: we do not store full payment card numbers), and preferred delivery dates.
• Recipient Information: Name, delivery address, and contact details of the recipient for correct delivery execution.
• Communication Records: Copies of your correspondence with us, including any feedback, queries, or complaints.
• Website Usage Data: Information collected via cookies and similar technologies about how you use our website, such as IP address, browser type, and referring website.

Lawful Basis for Processing

We process your personal data based on one or more of the following lawful bases as defined in Article 6 of the GDPR:

• Contractual Necessity: Processing your data is necessary to fulfil the contract and deliver your flower order or related services.
• Legal Obligations: We may need to process certain information to comply with laws and regulatory requirements, such as accounting and tax obligations.
• Legitimate Interests: We use your information to operate, improve, and maintain our service, ensure security, and communicate with you about your order, provided these interests are not overridden by your individual rights.
• Consent: Where you have given us explicit consent, for example, to receive marketing communications. You have the right to withdraw consent at any time.

How We Use Your Data

Your data is used for the following purposes:

• Processing and fulfilling your flower delivery orders, including communicating order status and updates.
• Managing your customer relationship and responding to your requests or inquiries.
• Improving and personalising your customer experience with us.
• Performing analytics to enhance our services and website performance.
• Meeting our legal and regulatory obligations.
• Sending you marketing information if you have given explicit consent (you can opt out at any time).

Retention of Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet legal, regulatory, or legitimate business requirements. Generally, order and transaction data is retained for up to seven years to comply with accounting and tax requirements. Data provided solely for customer service inquiries is retained for up to two years unless longer retention is required for dispute resolution. When your data is no longer required, it is securely deleted or anonymised.

Data Processors and Sharing

We may share your personal information with third-party service providers ("processors") who assist in delivering our services. These processors, who act on our instructions and in accordance with GDPR, may include:

• Payment processors to securely handle your payment transactions.
• Courier and logistics partners for delivering orders to the specified addresses.
• IT service providers for website hosting, maintenance, and support.
• Customer service platforms for managing and resolving your queries.
• Regulatory or law enforcement authorities if required by law.

All processors are subject to contractual obligations to implement appropriate technical and organisational measures to safeguard your data.

User Rights Under GDPR

Under the GDPR, you have several important rights in relation to your personal data:

• Right of Access: You can request confirmation of whether we process your data and obtain a copy of the information we hold about you.
• Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data under certain circumstances, such as when it is no longer needed or where consent has been withdrawn.
• Right to Restrict Processing: In some cases, you can ask us to restrict the use of your information.
• Right to Data Portability: You can ask to receive your data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller.
• Right to Object: You have the right to object to the processing of your data, in particular where processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You may lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been breached.

Data Security

Your data is protected using appropriate technical and organisational measures designed to prevent unauthorised access, loss, misuse, or disclosure. These measures include data encryption, access controls, regular security assessments, and staff training. While we strive to ensure the security of your data, please note that no online transmission is completely risk-free.

International Data Transfers

In limited circumstances, your personal data may be transferred outside the United Kingdom or European Economic Area (EEA) for purposes such as IT hosting. In such cases, we ensure that appropriate safeguards are in place, such as the use of standard contractual clauses or ensuring that the destination country is deemed to provide an adequate level of data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be highlighted on our website. We recommend reviewing this policy regularly.

Contact and Further Information

If you have questions or concerns regarding your personal data or wish to exercise your rights, please contact us using the methods provided on our website. We are committed to addressing your privacy-related concerns promptly and transparently.

This policy applies to all customers who place Flower Delivery Charing Cross orders from Charing Cross and the surrounding districts.