Flower Delivery Garston Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Garston collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers who place orders with Flower Delivery Garston from Garston and the surrounding districts. We are committed to safeguarding your personal information and ensuring transparency regarding our processing activities.

What Data We Collect

When you place an order or interact with Flower Delivery Garston, we collect the following types of personal data:

• Identity Data: Name, title.
• Contact Data: Delivery address, billing address, telephone number.
• Order Information: Products ordered, delivery instructions, order notes or special requests.
• Transaction Data: Payment method (not full card numbers), order history, billing details.
• Technical Data: IP address, browser type, access times (gathered through website analytics tools).
• Correspondence: Records of communication (such as order confirmation messages, feedback, or complaints).

Lawful Basis for Processing

We process your personal data lawfully, fairly, and transparently. The GDPR sets out several lawful bases under which we may process your data:

• Contract Performance: Most commonly, we collect and process personal data to fulfill our agreement with you, such as handling your orders and completing flower deliveries.
• Legal Obligation: We may be required to retain details of financial transactions for tax and accounting obligations.
• Legitimate Interests: We may process your data to improve our services, ensure the security of our website, or to prevent fraud, provided these interests do not override your fundamental rights and freedoms.
• Consent: We seek your consent for specific purposes, such as sending marketing communications. You have the right to withdraw your consent at any time.

How We Use Your Data

Your personal data is collected and used for the following purposes:

• Processing and fulfilling your flower delivery orders, including handling payment and arranging delivery.
• Communicating with you regarding your order or responding to your inquiries.
• Improving our products and services based on your feedback and interaction.
• Complying with legal and regulatory obligations.
• With your consent, providing information about our latest products, offers, or promotions.
• For fraud prevention, security, and website analytics to enhance the customer experience.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically, order and transaction data are retained for up to six years to comply with tax and legal obligations. Data used for marketing purposes will be kept for as long as you remain subscribed or until you withdraw consent. After the relevant retention period ends, personal data is securely deleted or anonymised.

Data Processors and Third Parties

To provide you with our services, we may share your personal data with selected third parties acting as data processors. These include:

• Payment processors: Securely handling your payments.
• Delivery partners: Assisting with flower delivery to your chosen address.
• IT service providers: Supporting our website and technological infrastructure.
• Professional advisers: Such as accountants or legal counsel, where required.

All third-party processors are contractually bound to safeguard your data and process it only under our instructions. We do not sell or rent your personal data to any third parties for marketing purposes. If the law requires, or for fraud prevention and detection, we may also share information with regulatory authorities.

International Data Transfers

Your personal data is generally stored within the United Kingdom or European Economic Area. Should we need to transfer data outside these regions, we will ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place in line with GDPR requirements to protect your privacy rights.

Security Measures

We employ a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include encrypted communications, secure storage systems, restricted access protocols, and regular cyber-security reviews. Our staff receive training in data protection to ensure your information remains confidential.

User Rights

Under GDPR, you have several important rights with regard to your personal data. These include:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: To correct any inaccuracies in your data.
• Right to Erasure: To request deletion of your personal data where there is no legitimate reason for retention.
• Right to Restrict Processing: To limit the way we process your data.
• Right to Data Portability: To receive your personal data in a structured, machine-readable format, or have it transmitted to another controller.
• Right to Object: To object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the details provided on our website. We may need to confirm your identity to process your request.

Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or relevant legal requirements. Any updates will be posted on our website, and we encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Information

If you have any questions, concerns, or wish to exercise your GDPR rights, please refer to the contact details listed on the Flower Delivery Garston website. We are committed to addressing your requests promptly and transparently.