Flower Delivery Shepherd's Bush - Your Data Privacy Explained

Privacy Policy for Flower Delivery Shepherd's Bush

Introduction

This Privacy Policy explains how Flower Delivery Shepherd's Bush ("we", "us", or "our") collects, uses, stores, and protects your personal data when you place an order for our flower delivery services in Shepherd's Bush and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring the privacy and security of your personal information.

Scope of this Policy

This policy applies to all individuals ("customers", "you") who order flower delivery services from us, either online or by telephone, within Shepherd's Bush and surrounding areas. By placing an order, you agree to the collection and processing of your personal information as described in this policy.

What Data We Collect

We collect only the data that is necessary for fulfilling your flower delivery orders and providing customer service. Depending on your interaction with us, this may include:

Identification Data: Name, title, and contact details such as delivery/recipient address and telephone number.
Order and Transaction Data: Order details, delivery preferences, billing address, and payment details (note: payment information is processed through secure third-party providers; we do not store your full card details).
Communication Data: Correspondence with customer service (such as queries, complaints, or feedback).
Technical Data: Device type, IP address, browser information (collected when using our website for security, analytics, and improvement of our service).

Purpose and Lawful Basis for Processing

We will only use your personal data when we have a lawful basis for doing so. Under GDPR, our processing is based on one or more of the following grounds:

Contractual necessity: To process and deliver your orders, communicate with you about your order, and fulfil our contractual obligations.
Legal obligation: To comply with applicable laws and financial record-keeping requirements.
Legitimate interests: For improving our services, handling customer enquiries or complaints, and preventing fraud, provided these interests do not override your fundamental rights and freedoms.
Consent: Where we seek your explicit consent for activities such as sending marketing communications. You may withdraw your consent at any time.

How We Use Your Data

Personal information is used for the following purposes:

To confirm, process, and deliver orders to the specified address in Shepherd's Bush or nearby districts.
To manage payments or refunds through secure payment processors.
To communicate order updates, delivery notifications, or respond to your customer service queries.
To comply with accounting, tax, and legal obligations.
To improve our website and services through usage analysis.

Retention of Personal Data

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal or regulatory requirements, and for the exercise or defence of legal claims. In general:

Order and transaction data is retained for up to 7 years for compliance with financial and tax obligations.
Communication data (emails, messages) is typically retained for up to 2 years unless further retention is needed for ongoing issues.
Technical data may be retained for up to 1 year for security and analysis purposes.

At the end of the retention period, your personal data will be securely erased or anonymised.

Data Sharing and Processors

We may share your personal data with trusted third-party service providers ("processors") as necessary for the functioning of our flower delivery services. These may include:

Payment providers: To process your payment securely.
Delivery partners or couriers: To deliver your flowers to the indicated address.
IT service providers: To support our ordering system, website hosting, and communications.
Professional advisers: Such as accountants or legal consultants to comply with our business obligations.

We require all processors to undertake appropriate security measures and only process your data in accordance with our instructions. We do not share your data with third parties for their own marketing purposes. Your information is not transferred outside the European Economic Area unless such transfers are protected by appropriate safeguards as required by GDPR.

Security of Your Information

We adopt physical, electronic, and managerial procedures to safeguard and secure your personal information. These include encryption of sensitive data, secure payment processing, restricted access to information, and regular staff training on data protection.

Your Rights Under GDPR

You have various rights regarding your personal data, including:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Correct or update your information if it is inaccurate or incomplete.
Right to erasure: Ask us to delete your personal data where it is no longer needed and we have no legal reason to retain it.
Right to restrict processing: Request limitation of data processing under certain circumstances.
Right to object: Object to processing based on legitimate interests or direct marketing.
Right to data portability: Receive your data in a structured, commonly used format and transfer it to another service provider.
Right to withdraw consent: Where consent is the basis for processing, you may withdraw it at any time.

To exercise any of these rights, or if you have questions about how your data is handled, please contact us using our published contact details.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our data practices or legal requirements. Significant changes will be communicated clearly on our website or by other appropriate means. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact and Further Information

If you have any concerns about this policy or your personal data, please reach out to our customer service team using the contact details provided on our website. We aim to respond promptly to all privacy-related queries or requests.