Privacy Policy for Flower Delivery Elephant and Castle

Introduction

This Privacy Policy explains how Flower Delivery Elephant and Castle collects, processes, stores, and protects your personal information in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flower Delivery Elephant and Castle from Elephant and Castle and the surrounding districts. We take your privacy seriously and are committed to safeguarding your personal data.

What Data We Collect

In the course of providing our flower delivery services, we may collect and process the following types of personal data:

• Identification Data: Name, delivery address, billing address, and contact details such as telephone number.
• Order Details: Details of the products you order, delivery instructions, and order preferences.
• Payment Information: Payment method chosen, transaction details (handled securely by third-party payment processors; we do not store card numbers).
• Communication Records: Any correspondence with our customer service team, including queries, complaints, or feedback.
• Technical Information: IP address, browser type, and device details collected for security, optimization, and analytics purposes.
• Consent Preferences: Your preferences regarding marketing and communications, where you have provided such consent.

Lawful Basis for Processing

Flower Delivery Elephant and Castle processes your personal data only where we have a lawful basis to do so, as defined under GDPR. Our lawful bases include:

• Contractual Necessity: Most of the data we process is required to fulfill our contract with you, such as processing your order and arranging its delivery.
• Legal Obligation: We may retain and disclose information as required by law or to comply with regulatory requirements.
• Legitimate Interests: We process certain data to improve our services, manage our operations, and prevent fraud, provided that these interests do not override your rights and freedoms.
• Consent: On occasions where we seek your consent (such as sending marketing communications), processing will only occur once you have provided clear, affirmative agreement. You can withdraw consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling flower delivery orders.
• Communicating with you regarding your order, including updates and delivery confirmations.
• Managing payments and preventing fraudulent transactions.
• Responding to customer queries, requests, or complaints.
• Improving our website, services, and customer experience through data analysis and feedback.
• Sending you marketing communications if you have opted in to receive them.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. Typically, order information and correspondence are retained for up to seven years for accounting and auditing purposes. Marketing preferences are retained only as long as you are subscribed or until you withdraw your consent. At the end of the retention period, personal data is securely deleted or anonymized.

Processors and Sharing Data

To provide our services, we may share your personal data with carefully selected third-party processors who act on our behalf. These processors include:

• Payment Service Providers: To process your payment securely.
• Delivery and Logistics Partners: To arrange delivery of your order to the specified address.
• IT and Web Hosting Providers: To ensure the functionality and security of our website and data storage.
• Customer Service Tools: To manage communications with you efficiently.

All processors are contractually obliged to safeguard your data and act only in accordance with our instructions and the applicable data protection regulations. We do not sell or rent your personal data to third parties.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any data that is inaccurate or incomplete.
• Right to Erasure: Request the deletion of your personal data where there is no longer a justification for its retention.
• Right to Restrict Processing: Ask us to restrict the processing of your data in certain circumstances.
• Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format, or have it transferred to another provider.
• Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw any consent given for specific processing activities at any time.

To exercise your rights, please contact us using the contact details provided through our established communication channels.

Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. Such measures include secure servers, encryption, regular security assessments, controlled access, and staff training. However, no internet-based service is completely secure and we encourage you to take appropriate measures to protect your personal data.

International Transfers

Your personal data may be processed outside the European Economic Area (EEA) if our processors are located or store data internationally. In such cases, we ensure that all necessary safeguards are in place to protect your information, including standard contractual clauses or equivalent protective measures in compliance with GDPR.

Changes to This Privacy Policy

We reserve the right to update this privacy policy from time to time to reflect changes in our business or legal requirements. We encourage you to review this policy periodically to stay informed about how we protect your personal information.

Contact and Complaints

If you have questions about this Privacy Policy or wish to make a complaint regarding the processing of your personal data, please contact us via the channels available on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have not been upheld.