Privacy Policy for Customers of Flower Delivery Finsbury

Introduction

This Privacy Policy sets out how Flower Delivery Finsbury collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018. This policy applies to all customers placing flower delivery orders with Flower Delivery Finsbury, whether for themselves or on behalf of others, from within Finsbury and the surrounding districts.

What Data We Collect

To process your order and provide our services, Flower Delivery Finsbury collects personal data directly from you when you place an order through our website, app, or by phone. The types of data we may collect include:

• Identity Data: Your full name and, if necessary, your title.
• Contact Data: Your delivery address, billing address, telephone number, and contact preferences.
• Recipient Data: Name, address, and phone number of the person receiving the flowers (if different from the customer).
• Order Data: Details of the products you order, any messages you include, or special delivery instructions.
• Payment Data: Payment method details (please note that we use secure, third-party payment processors and do not store full card details ourselves).
• Technical Data: IP address, browser type, device type, and cookies (see below).
• Communications Data: Records of your communications with us, including feedback and complaints.

Lawful Basis for Processing Your Data

Under GDPR, we are required to have a lawful basis for processing personal data. Flower Delivery Finsbury processes personal data on the following bases:

• Contractual Necessity: To fulfil the flower delivery services you request by processing orders, payments, and deliveries.
• Legal Obligation: To comply with legal requirements and obligations under UK and EU law, such as record-keeping for tax purposes.
• Legitimate Interests: For our legitimate business interests, such as ensuring quality customer service, communicating with you regarding your order, and improving our services, provided these interests do not override your fundamental rights and freedoms.
• Consent: For optional activities, such as sending marketing updates, we will seek your explicit consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal information is used primarily to process flower delivery orders and ensure the proper delivery of your chosen items. Additionally, your data may be used to:

• Send administrative messages relating to your order
• Contact you for feedback after service delivery
• Respond to your inquiries and resolve complaints
• Comply with accounting and legal requirements
• Improve our services and website functionality
• Send you promotional offers, if you have opted in to receive them

Retention of Personal Data

Flower Delivery Finsbury retains your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Typically, we retain order-related information for up to seven years to comply with accounting and tax regulations. Data used solely for marketing purposes will be kept until you withdraw your consent or unsubscribe. Technical data such as cookies will be retained as described in our Cookies Policy. Upon expiry of the relevant period, your data will be securely deleted or anonymised.

Data Processors and Data Sharing

In order to provide and improve our services, Flower Delivery Finsbury engages reputable third-party processors who process personal data on our behalf, consistent with GDPR requirements. These may include:

• Payment service providers that securely process payments
• IT service providers for hosting, website analytics, and infrastructure
• Delivery partners responsible for fulfilling your flower delivery orders

All processors are contractually bound to protect your data, use it only for specified purposes, and not to disclose it to other parties. Personal data is not sold to any third parties. We may disclose personal data if required by law or to enforce our legal rights.

Your Rights Under GDPR

As a customer of Flower Delivery Finsbury, you have several rights under the GDPR in relation to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or outdated data.
• Right to Erasure: Request deletion of your data where it is no longer necessary for us to retain it.
• Right to Restrict Processing: Ask us to restrict processing in certain circumstances, such as if you contest the accuracy of the data.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another supplier.
• Right to Object: Object to processing carried out on the grounds of legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing), you may withdraw your consent at any time.

How We Protect Your Data

We implement a range of technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, encrypted payment processing, regular system monitoring, and staff training on data protection responsibilities.

Cookies

Our website uses cookies to ensure the proper functioning of the site, improve user experience, and assist in analysing site usage. Where required, you will be asked for your consent to use cookies not necessary for the provision of our services. You can manage your cookie preferences through your browser settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changes to the law, new business practices, or new technologies. If material changes are made, we will inform you by displaying a prominent notice on our website or by other appropriate means. The latest version is always available on our website.

Contact and Complaints

If you wish to exercise any of your rights as described above or have questions regarding this policy and our data practices, please contact us using the methods provided on our website. If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office or your local supervisory authority within the EU or UK.