Flower Delivery Purley Privacy Policy

Introduction

At Flower Delivery Purley, we prioritise the privacy and security of your personal information. This Privacy Policy explains how we handle your data in compliance with the UK General Data Protection Regulation (GDPR) and any applicable local data protection laws. This policy applies to all individuals placing flower delivery orders from Purley and the surrounding districts, whether orders are made online, by phone, or in person.

What Personal Data We Collect

When you order flowers from Flower Delivery Purley, we collect certain personal data necessary to fulfil your order and provide our services. This may include:

  • Identification Data: Your name, the recipient's name
  • Contact Information: Address, delivery address, telephone number
  • Order Information: Details of the products you order, delivery messages, and any special instructions
  • Payment Data: Transaction details (note that actual card details are processed securely by payment providers and are not stored by us)
  • Communication Records: Records of correspondence with us (for example, queries, complaints, or feedback)
  • Technical Data: IP address, browser type and version, time zone setting, operating system, device type (if you use our website)

Purposes and Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. The key lawful bases relevant to your interactions with Flower Delivery Purley are:

  • Contractual Necessity: We process your data to fulfil our contract with you (e.g., to process, deliver, and manage your order).
  • Legal Obligations: We may process your data to comply with legal requirements, such as accounting and tax obligations.
  • Legitimate Interests: We process your data to improve our services, handle queries, or protect our business. We ensure that our legitimate interests do not override your privacy rights.
  • Consent: If you opt in to receive marketing communications, we use your data based on your consent. You can withdraw consent at any time.

How We Use Your Personal Data

Your data is used for the following purposes:

  • Processing orders and delivering flowers
  • Managing payments and refunds
  • Contacting you regarding your order status or any issues
  • Responding to your queries, feedback, or complaints
  • Improving our products and customer service
  • Marketing our services to you if you have agreed to receive such communications
  • Maintaining business records as required by law

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required to meet legal, accounting, or reporting obligations. Typically:

  • Order and transaction details are retained for up to seven years to comply with legal and accounting requirements.
  • Basic contact and identification data are held for up to two years after your last order, unless you request deletion sooner or we are required by law to retain it longer.
  • Marketing contact preferences are kept until you withdraw consent or opt out.

Processors and Sharing of Data

We may use trusted third-party companies (data processors) to assist with certain business functions, such as payment processing, order fulfilment, IT support, and marketing. These processors act under our instructions, have access to your data only as necessary to perform the task, and are required to keep it secure and confidential.

Your data is not sold or shared with third parties for their own marketing purposes. We may disclose data where required by law, for example to government bodies or law enforcement agencies.

Data Transfers outside the UK or EEA

If we use service providers that operate outside the UK or European Economic Area, we take steps to ensure your information receives an adequate level of protection in line with data protection laws. These measures might involve contracted data protection clauses or relying on adequacy regulations.

Your Rights Under GDPR

You have important rights concerning your personal data, which you can exercise subject to certain conditions:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask for incorrect or incomplete information to be amended.
  • Right to Erasure (Right to be Forgotten): You can request deletion of your data when it is no longer necessary for us to retain it, or where processing was based on consent you have withdrawn.
  • Right to Restrict Processing: You can request we stop processing your personal data in certain circumstances.
  • Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Data Portability: For data processed by automated means based on consent or contract, you can request the transfer of your data to a third party, where technically feasible.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time.
  • Right to Lodge a Complaint: You have the right to complain to a supervisory authority if you believe your data protection rights have been breached.

Security of Your Data

We implement appropriate technical and organisational measures to keep your personal data secure, including limiting access to your data, using secure servers and encryption where appropriate, and training staff in data protection best practices.

Children's Privacy

Our services are not intended for use by individuals under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will always be posted on our website with the date of the latest amendment.

Contact and Further Information

If you have questions about how your data is handled or wish to exercise any of your rights, please contact us at your convenience through our usual customer service channels. For additional information about data protection and your rights, you can also consult the Information Commissioner's Office (ICO).