Flower Delivery Romford GDPR Privacy Policy

Privacy Policy for Customers of Flower Delivery Romford

This Privacy Policy explains how Flower Delivery Romford (“we”, “us”, or “our”) collects, uses, and safeguards your personal data. It applies to all customers ordering flower deliveries in Romford and surrounding districts. We are committed to ensuring that your privacy is protected and that we comply with the General Data Protection Regulation (“GDPR”) and all applicable UK data protection laws.

1. What Personal Data We Collect

When you place an order with Flower Delivery Romford, we collect and process certain personal data necessary to fulfill your order and provide our services. The types of data collected may include:

  • Identity Data: Your name, and if ordering on behalf of someone else, the recipient's name.
  • Contact Data: Delivery addresses, billing addresses, postal codes, and contact phone numbers.
  • Order and Transaction Data: Details about your flower order, messages to be delivered with your arrangement, and order history.
  • Payment Data: Limited payment information. We do not store full card details but may process cardholder names and partial details needed for verification, through secure third-party payment processors.
  • Technical Data: IP address, browser type, and similar data, via cookies and analytics, if you order online.
  • Communications: Records of correspondence with us, including enquiries, feedback, or complaints.

2. Lawful Basis for Processing Your Data

Flower Delivery Romford processes your personal data under the following legal bases:

  • Contractual Necessity: We need your personal data to process and fulfill your flower order and to provide related services (e.g., delivery, payment processing).
  • Legal Obligations: We may need to retain some data for tax, accounting, or regulatory purposes.
  • Legitimate Interests: We may use your data for business analytics, fraud prevention, to improve our services, or to communicate necessary information related to your order.
  • Consent: Where required, such as for marketing communications, we will only use your personal data if you have given explicit consent. You can withdraw your consent at any time.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

  • Fulfilling and delivering your flower orders accurately and on time.
  • Processing your payment securely through verified payment providers.
  • Communicating order updates, confirmations, and any issues related to your order.
  • Providing customer service, responding to queries, and handling complaints efficiently.
  • Complying with legal and regulatory obligations.
  • Analysing aggregate customer data to improve our services.

4. Data Retention Policy

Flower Delivery Romford will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including:

  • Order Data: Retained for up to 7 years to comply with accounting, tax, and legal obligations.
  • Contact and Communication Data: Retained for up to 2 years after your last order or enquiry, unless a longer retention period is required for legal reasons or ongoing matters.
  • Technical Data: Typically retained in anonymized or aggregated form for analytics for up to 2 years.
  • We regularly review our data retention periods and securely delete personal data which is no longer required.

5. Data Processors and Sharing Your Data

To provide our services, we may share your data with trusted third-party processors, who only process data on our behalf and under strict contractual obligations. These may include:

  • Secure payment providers for processing card or online payments.
  • IT and cloud service providers for website and order management.
  • Independent delivery drivers or logistics companies for delivery purposes.
  • Professional advisors, such as accountants or auditors, where necessary for compliance.

We do not sell your personal data or share it with unauthorised third parties. Should we need to transfer your data outside the UK or EEA, we ensure appropriate safeguards and protections are in place, as required by law.

6. Your Rights Under GDPR

As a customer placing orders in Romford or surrounding districts, you have the following rights over your personal data:

  • Access: You can request access to a copy of your personal data held by us.
  • Rectification: You can request correction of inaccurate or incomplete data.
  • Erasure ("Right to be Forgotten"): You may request deletion of your data where there is no legal reason for us to continue processing it.
  • Restriction: You can ask us to restrict processing of your data in certain circumstances.
  • Objection: You may object to our processing of your data where we rely on legitimate interests.
  • Portability: You can request to receive your data in a structured, commonly used format, and have it transferred to another provider, where technically feasible.
  • Withdraw Consent: Where we rely on your consent (such as for marketing), you can withdraw it at any time.

To exercise any of these rights, please contact us via our standard communication channels. We may need proof of identity before responding to certain requests. We aim to respond within one month of receiving your request.

7. How We Protect Your Data

We use a variety of physical, technical, and organisational measures to safeguard your personal data, including secure payment processing, encryption, restricted access, and regular staff training. Although we strive to protect your data, no method of transmission over the internet or electronic storage is completely secure. We take prompt action in the unlikely event of any data breach.

8. Changes to This Privacy Policy

From time to time we may update this Privacy Policy to reflect changes in our practices, legal requirements, or improvements to our services. The most current version will always be available to you before you place an order. Major changes will be communicated when appropriate.

9. Contact and Complaints

If you have any questions, concerns, or wish to exercise your rights regarding how we handle your personal data, please contact us using our communication channels. If you are dissatisfied with our response or data handling, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

By placing an order with Flower Delivery Romford, you acknowledge that you have read and understood this Privacy Policy. Your privacy matters to us, and we are dedicated to ensuring your data is handled safely, lawfully, and respectfully at every stage of your order journey.