Flower Delivery Chalford Saint Giles Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Chalford Saint Giles collects, uses, stores, and protects your personal data when you place an order for flower delivery in Chalford Saint Giles and the surrounding districts. We are committed to upholding your privacy and handling all personal data in accordance with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws.

Scope of Policy

This policy is applicable to all customers who place flower delivery orders with Flower Delivery Chalford Saint Giles, whether the orders are made online, by phone, or in person. It covers the collection, use, and protection of the data you provide to us as part of your ordering experience.

Data We Collect

Depending on your interaction with us and the nature of your order, we may collect the following types of personal data:

• Contact Details: Such as your name, address, telephone number, and delivery address (including recipient details).
• Order Information: Details about your chosen flowers, card messages, delivery dates, payment methods (we do not store full payment card details), and any order notes.
• Communication Data: Records of correspondence when you contact us, including queries or feedback regarding our services.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access our website.

Lawful Basis for Processing

Our collection and use of your personal data are always subject to a lawful basis, as required under the GDPR. We process your personal information for the following purposes and on the following bases:

• Performance of a Contract: Processing your order, arranging payment, fulfilling delivery, and providing customer support related to your purchase.
• Legal Compliance: To comply with legal obligations, for example maintaining records for tax, accounting, or regulatory purposes.
• Legitimate Interests: To improve our services, manage our customer relationships, send occasional service updates, and ensure website security. We balance our interests with your rights and freedoms.
• Consent: When you have given your explicit consent, for instance, if you subscribe to marketing communications. You can withdraw your consent at any time.

How We Use Your Data

We use your personal data to:

• Process, confirm, and deliver your flower orders.
• Communicate with you regarding your order status or queries.
• Maintain records for financial, regulatory, and legal compliance.
• Improve our website, services, and customer experience.
• Where permitted, to inform you about changes to our services or promotions.

Data Retention

Flower Delivery Chalford Saint Giles will retain your personal data only for as long as is necessary to fulfil the purposes described in this policy, including for satisfying any legal, regulatory, or accounting requirements. Generally, we keep order data for up to six years after the transaction date, unless a longer retention period is required by law. Any marketing data processed on the basis of consent will be retained until you withdraw your consent or opt out of such communications.

Data Processors and Sharing

In order to provide uninterrupted and high-quality flower delivery services, we may share your data with carefully selected third parties, known as data processors. These include:

• Payment processing providers (to facilitate secure payment transactions).
• Delivery partners (for order fulfilment and logistics).
• IT service providers (such as website hosting companies and customer management software partners).
• Professional advisers (such as accountants and auditors, where legally required).

All third-party processors are contractually obliged to safeguard your personal data and to process it only on our instructions and in accordance with GDPR requirements. Personal data is never sold or rented to third parties for their direct marketing purposes.

Your Rights

Under the GDPR, you have important rights with respect to your personal data. These rights include:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to ask us to correct any inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): The right to request the deletion or removal of your personal data under certain circumstances.
• Restriction: The right to restrict processing of your personal data in certain situations.
• Data Portability: The right to receive your personal data in a structured, commonly used format and to request that it be transferred to another data controller.
• Object: The right to object to the processing of your personal data, particularly where we rely on legitimate interests or direct marketing communications.
• Withdraw Consent: Where consent is the lawful basis, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided on our website or via your usual contact method. We aim to respond to all requests within one month.

Security Measures

We have put in place appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Access to your personal data is restricted to staff and processors on a strict need-to-know basis. All online transactions are secured with encryption technologies, and regularly audited for vulnerabilities.

International Transfers

Your personal data is generally stored and processed within the United Kingdom. If we ever transfer your data outside the UK or European Economic Area (EEA) for service provision, we will ensure that it is subject to adequate safeguards and is protected in a manner that is consistent with GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our data handling practices, or the services we provide. Any substantive changes will be made available on our website. We encourage you to review this policy periodically.

Contact and Complaints

If you have any questions, requests, or concerns regarding this Privacy Policy or how we process your data, please contact us via our online contact page. If you are not satisfied with our response, you also have the right to lodge a complaint with the UK Information Commissioner’s Office.

This policy was last updated in June 2024.