Privacy Policy for Customers of Flower Delivery Brent Cross

Introduction

This Privacy Policy explains how Flower Delivery Brent Cross collects, uses, stores, and protects your personal data when you place an order with us. This policy applies to all customers who place orders for flower delivery from Brent Cross and the surrounding districts. We are committed to ensuring that your privacy is protected and managed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

What Personal Data We Collect

When you interact with Flower Delivery Brent Cross, we may collect various types of personal data to process your orders efficiently and provide the best customer service. The types of data we may collect include:

• Contact Information: Name, delivery address, billing address, and any relevant contact details required to fulfill your order.
• Order Information: Details about products or services purchased, delivery preferences, card message content, and any special instructions.
• Payment Information: Payment card details, transaction references, and billing information (handled securely by our payment processor).
• Communication Data: Any correspondence you send to us, including feedback, queries, and complaints.
• Technical Data: IP addresses, device type, browser information, and usage data collected through cookies or similar technologies (where applicable and in line with cookie policy).

Lawful Basis for Processing

Under the GDPR, we must have a valid lawful basis to process your personal data. Flower Delivery Brent Cross relies on the following lawful bases:

• Contractual Necessity: The primary reason we collect and use your personal data is to fulfill the contract of sale when you place an order with us. This includes processing your payment, delivering flowers, and communicating with you about your order.
• Legal Obligation: In some cases, we may be required to process and retain certain data by law (e.g., for tax or accounting purposes).
• Legitimate Interests: We may process your data to improve our services or safeguard against fraud, provided that our interests do not override your rights and freedoms.
• Consent: If we ever wish to use your data for marketing purposes, we will request your explicit consent, which you are free to withdraw at any time.

How We Use Your Personal Data

Your data is used for the following purposes:

• Processing and fulfilling your flower delivery orders
• Communicating with you regarding your orders, queries, and feedback
• Managing payments and preventing fraud
• Maintaining business records as required by law
• Improving our products and services based on customer feedback

Data Retention

Flower Delivery Brent Cross will retain your personal data only as long as is necessary for the purpose for which it was collected:

• Order and transaction data: Retained for seven years to comply with legal obligations, such as tax and accounting regulations.
• Customer correspondence and communication data: Retained for up to two years following the resolution of any customer issues or queries.
• Marketing data (if consent is provided): Retained until you withdraw consent or unsubscribe from our communications.

When your data is no longer required, it will be securely deleted or anonymized.

Processors and Data Sharing

We may share your information with third-party service providers who perform functions on our behalf, such as payment processing, website hosting, delivery management, and technical support. These external providers are engaged as data processors and are strictly bound by contractual obligations to process your data according to our instructions, maintain confidentiality, and comply with applicable data protection laws.

Wherever possible, we choose processors operating within the European Economic Area (EEA). If it becomes necessary to transfer your data outside the EEA, we will ensure appropriate safeguards are in place to protect your information.

Flower Delivery Brent Cross does not sell or rent your personal data to any third parties.

Your Rights Under GDPR

As a data subject under GDPR, you have several legal rights concerning your personal data:

• Right of Access: You can request copies of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate information or complete partial data.
• Right to Erasure: You may request the deletion of your personal data when it is no longer necessary for the purpose collected, or when consent is withdrawn.
• Right to Restrict Processing: You have the right to request limitations on how we process your data in certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used format to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or direct marketing (where applicable).
• Right to Withdraw Consent: If we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to file a complaint with the applicable supervisory authority.

To exercise any of your rights, please contact us using the contact information provided in the relevant section of our website. We will respond to your requests promptly, within one month as required by law.

Data Security

We implement appropriate technical and organizational measures to keep your personal data secure and protect it against unauthorized or unlawful access, accidental loss, destruction, or damage. These measures include encrypted communications, access controls, and regular security reviews.

Policy Updates

We may periodically update this Privacy Policy to reflect regulatory changes, improvements in our data protection practices, or operational adjustments. The latest version will always be available on our website, and significant changes will be communicated to you as appropriate.

Scope and Applicability

This Privacy Policy applies to all customers placing flower delivery orders with Flower Delivery Brent Cross within Brent Cross and the surrounding districts. By placing an order, you consent to the collection, use, and processing of your personal data as described in this policy.