Flower Delivery Bermondsey Privacy Policy

Introduction

This Privacy Policy sets out how Flower Delivery Bermondsey collects, uses, stores, and protects your personal data when you place an order for flower delivery in Bermondsey and its surrounding districts. Your privacy is of utmost importance to us, and we act in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. By placing an order with Flower Delivery Bermondsey, you agree to the practices described herein.

Scope of Policy

This policy applies to all individual customers who place orders with Flower Delivery Bermondsey, whether directly through our website, by telephone, in person, or via any other ordering platform, for delivery addresses located in Bermondsey and surrounding districts. This policy details the categories of personal data we collect, our reasons for collecting and processing such data, how we handle and protect your data, and the rights you have as a data subject.

What Data We Collect

When you interact with Flower Delivery Bermondsey and place an order, we may collect the following personal data:

• Contact Information: Name, billing address, delivery address, and telephone number.
• Order Details: Products ordered, delivery notes, message to recipient, and purchase history.
• Payment Information: Payment card details are processed via secure third-party payment processors; we do not store or have access to full card data.
• Communication Records: Correspondence with customer service, details of requests or complaints.
• Technical Data: IP address, browser type, device identifiers, and cookies for website functionality and analytics.

We only collect data necessary for the provision of our services and to comply with legal requirements.

Lawful Basis for Processing Data

Our collection and processing of personal data is always done in accordance with one or more lawful bases specified by GDPR:

• Contractual Necessity: We process your personal data to fulfil your order, deliver flowers, process payments, and provide customer service.
• Legitimate Interests: We may process data for our internal business functions, such as quality assurance, improvements to our services, fraud prevention, and customer relationship management, provided these are not overridden by your fundamental rights.
• Legal Compliance: We may process your data to comply with legal or regulatory obligations, such as accounting and tax requirements.
• Consent: Where required, for example, for marketing communications, we will only process your personal data with your explicit consent, which may be withdrawn at any time.

How We Use Your Data

Your personal data may be used in the following ways:

• To process and fulfil your flower delivery order.
• To communicate with you regarding your order or enquiries.
• To improve our products, services, and customer experience.
• To maintain business records and comply with legal obligations.
• For internal security, auditing, and quality assurance.
• If you have provided consent, to send you marketing communications regarding our services or promotions.

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the fulfilment of your order, accounting and tax purposes, and to meet any legal, regulatory, or reporting requirements. Typically, customer-related data is retained for up to seven years to comply with financial record keeping standards. After this period, data is securely deleted or anonymised unless there is a legitimate reason to retain it for longer.

Third-Party Data Processors

To deliver our services, we may employ trusted third-party providers (data processors). These may include:

• Payment processing companies for securely handling transactions.
• Courier or local delivery services for fulfilling your delivery requests.
• IT service providers hosting our website and managing technical infrastructure.
• Professional advisors and consultants assisting with regulatory or business operations.

All third-party processors are carefully vetted and required to process your data only for specified purposes and in compliance with GDPR. They are not permitted to use your data for their own purposes and are contractually obligated to maintain its security and confidentiality.

Your Rights Under GDPR

Under GDPR and UK data protection law, you have specific rights in relation to your personal data. These include:

• Right of Access: You have the right to request access to any personal data we hold about you and to receive information on how it is processed.
• Right to Rectification: You can request that inaccuracies in your data are corrected.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data.
• Right to Restriction: You have the right to restrict the processing of your data in certain situations.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing where the legal basis is our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, or if you have any queries or concerns about your data, you may submit a request using our designated contact method described on our website. We will respond within one month and always treat your requests seriously and in accordance with legal requirements.

Data Security

We are committed to securing your personal data. We implement industry best practices and technical organisational measures such as encryption, access limitation, regular security assessments, and staff training to prevent unauthorised access, alteration, disclosure, or destruction of your data. Whilst we take all reasonable steps to safeguard your information, please be aware that the transmission of data over the internet can never be completely secure.

Changes to Our Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business operations, legal obligations, or to improve our privacy practices. Any significant changes will be clearly communicated. We encourage you to review this policy regularly to remain informed about how we protect your data.

Contact and Complaints

If you have any concerns, complaints, or wish to exercise your data rights, please contact us using the methods listed on our website. If you are unsatisfied with our response, you have the right to raise a complaint with the UK Information Commissioner’s Office (ICO).

Thank you for choosing Flower Delivery Bermondsey. Your trust and privacy are important to us.