Flower Delivery Lambeth GDPR-Compliant Privacy Policy

Introduction

This Privacy Policy sets out how Flower Delivery Lambeth collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (GDPR). This policy is relevant to all customers who place flower delivery orders with Flower Delivery Lambeth, whether you are located in Lambeth or in surrounding districts. Ensuring the security and lawful handling of your personal data is fundamental to our commitment to excellent service and compliance with legal requirements.

What Data We Collect

When you engage with Flower Delivery Lambeth for flower delivery services, we may collect and process the following types of personal data:

• Contact Information: Name, delivery address, billing address, phone number (if provided), and email address (if provided).
• Order Details: Product selections, delivery instructions, any relevant messages to recipients, and payment transaction details (note: payment details such as card numbers are processed securely by third-party payment providers and are not stored by us).
• Account Information: When you create an account with us, we collect your login details, preferences, and order history.
• Technical Data: IP address, browser type, operating system, and cookies data, to improve our website and user experience.
• Correspondence: Records of your communications with us, including queries, complaints, or feedback.

Lawful Basis for Processing Personal Data

Under the GDPR, we must have a lawful basis to process your personal data. Flower Delivery Lambeth processes your information on the following bases:

• Contractual Necessity: Most of the personal data collected is required to enter into, or perform, the contract of delivering flowers to you or your chosen recipient.
• Legal Obligation: In certain cases, we are legally required to keep records for tax or accounting purposes, or to comply with other legal obligations.
• Legitimate Interests: We may process your data for our legitimate interests, such as improving our services, preventing fraud, ensuring IT security, and managing our relationship with you, provided these interests are not overridden by your rights and interests.
• Consent: Where none of the above bases apply, we will ask for your explicit consent, for example when subscribing to marketing or newsletters. You can withdraw your consent at any time.

How We Use Your Data

Flower Delivery Lambeth uses your personal data strictly for the purposes outlined below:

• To process and deliver your flower orders, including sending delivery updates.
• To handle payments and account for transactions.
• To communicate with you regarding your orders or respond to your inquiries.
• To improve our website, services, and customer experience.
• To comply with legal and regulatory obligations.
• To send promotional communications if you have opted in.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods can vary depending on the nature of the information, the services provided, and legal requirements.

• Order and Account Information: Usually retained for seven years for accounting and tax purposes, unless you request erasure of your data before that time, subject to compliance with legal obligations.
• Marketing Data: Retained for as long as you are subscribed to marketing communications. If you unsubscribe, your data will be promptly removed from our marketing lists.

After the retention period elapses, we will securely delete, anonymise, or destroy your personal data.

Data Processors and Sharing

In some cases, we use trusted third-party service providers (data processors) who support us in delivering services to you. These providers may include payment processors, delivery companies, IT hosting and support providers, and communications services. All processors are contractually obligated to safeguard your data in accordance with GDPR and are only permitted to process your data on our instructions.

We do not sell or rent your personal information to third parties. Your data will not be used for automated decision-making or profiling.

In rare cases, we may be required to share your data with regulatory authorities or law enforcement to comply with legal obligations.

Your Rights Under GDPR

As a customer of Flower Delivery Lambeth, you have the following rights regarding your personal data:

• Right to Access: You can request details of what personal data we hold about you.
• Right to Rectification: You may ask us to correct or complete inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You can ask us to suspend the use of your data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a structured format that can be transferred to another service provider.
• Right to Object: You can object to the processing of your data based on our legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Security

Flower Delivery Lambeth follows stringent security measures designed to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes both technical security (such as encryption and secure servers) and organisational procedures (such as staff training and restricted access protocols).

Policy Updates

We may periodically update this Privacy Policy to reflect changes in regulations and our operational practices. Where changes are material, we will inform customers via our website or by other appropriate means. We encourage you to review this policy frequently to remain informed about how we protect your personal information.

Contact and Complaints

If you have any questions regarding this Privacy Policy, your data, or if you wish to exercise any of your rights, please reach out using the contact channels available on our website. If you are unhappy with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority.

This Privacy Policy is effective as of June 2024 and applies to all customers placing Flower Delivery Lambeth orders from Lambeth and the surrounding districts.