Flower Delivery East Ham GDPR Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery East Ham ("we", "us", or "our") collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing Flower Delivery East Ham orders in East Ham and surrounding districts.

What Data We Collect

When you place an order or interact with our services, we may collect the following types of personal data:

• Identity Data: Full name, recipient's name
• Contact Details: Billing address, delivery address, telephone number (if provided by you), and payment information (processed securely by third-party providers)
• Order Information: Invoice details, messages included in your order, specific flower or gift choices
• Usage Data: Details about your interactions with our website, including IP address, browser type, device information, and usage patterns collected via cookies (see our Cookie Policy for details)

Our Lawful Basis for Data Processing

According to the GDPR, we are required to have a lawful basis for processing your personal data. Flower Delivery East Ham processes your personal data on the following bases:

• Contractual Necessity: We require your personal information to fulfil and deliver your order, send order confirmations, and provide customer service.
• Legal Obligation: We may process data to comply with legal or regulatory requirements such as bookkeeping or fraud prevention.
• Legitimate Interests: We may use your data to improve our services, ensure security, and send relevant service-related communications (not marketing) that do not override your rights and freedoms.
• Consent: For marketing or promotional correspondence, we collect and use your data only when you have given express consent. You can withdraw your consent at any time.

How We Use Your Information

We use your personal data for the following purposes:

• To process, confirm, and deliver your flower orders
• To update you regarding your order status
• To manage payments, fees, and charges
• To provide customer service and resolve disputes
• To comply with financial, legal, or regulatory obligations
• To monitor and improve our website, products, and user experience
• To send promotional communications (only if you have opted in)

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this Privacy Policy and as required by law. Typically, order records and associated personal data are retained for up to 7 years to comply with tax and accounting regulations. Where your data is no longer required for these purposes, it will be securely removed or anonymised.

Our Data Processors

We use third-party service providers (known as "processors") to facilitate certain parts of our service. These include:

• Payment service providers for secure processing of card transactions
• Delivery partners for ensuring accurate order delivery
• Website hosting and analytics providers to maintain security and optimise our website

All external processors are vetted to ensure their compliance with GDPR and are contractually bound to protect your data and use it only as instructed by us. Data may be processed outside the UK or EEA only where appropriate safeguards are in place.

User Rights

Under GDPR, you have the following rights regarding your personal data:

• The Right to Access: Request a copy of your personal data we hold
• The Right to Rectification: Request corrections to inaccurate or incomplete data
• The Right to Erasure: Request deletion of your data in certain circumstances, subject to legal retention requirements
• The Right to Restrict Processing: Request limitations on how we use your data
• The Right to Data Portability: Request electronic copies of your data to transfer to another provider
• The Right to Object: Object to processing based on legitimate interests or direct marketing
• The Right to Withdraw Consent: Withdraw your consent at any time for data processing where consent is required

To exercise any of these rights, or if you have questions or concerns about how your personal data is handled, please contact us using the details provided on our website or at the point of sale.

Keeping Your Data Secure

We take reasonable technical and organisational measures to safeguard your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Access to your information is restricted to employees and service providers who need it to fulfil your order. We regularly review our security procedures and update them as technology evolves.

Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in law, our data practices, or our business operations. We will indicate the date of the latest revision at the top of the policy. Please check this page periodically for any changes.

Contacting Us

If you have any questions about this policy or your data, please refer to the contact details provided on our website or at our physical location in East Ham. We are committed to respecting your privacy and upholding your rights regarding your personal information.