Flower Delivery Harlington Privacy Policy – GDPR Compliance

Introduction

Welcome to the Privacy Policy of Flower Delivery Harlington. We value your privacy and are dedicated to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal information when you place flower delivery orders with us in Harlington and surrounding districts, and details the rights you have regarding your personal data.

Scope of This Policy

This Privacy Policy applies to all customers who place orders for flower delivery with Flower Delivery Harlington, whether online, by phone, or in person, within Harlington and its surrounding areas. By using our services, you consent to the processing of your personal data as described in this document.

What Data We Collect

When you interact with Flower Delivery Harlington, we may collect and process the following categories of personal data:

• Identity Information: Your full name, and occasionally the names of gift recipients.
• Contact Information: Home or delivery address, phone number, and (if provided) email address.
• Order Information: Details about the flowers, products, or gifts ordered, delivery preferences, and special instructions.
• Payment Information: Payment method details. Please note, we do not store full card details; these are processed securely via our payment providers.
• Communications: Correspondence via email, phone, or messages related to your orders or customer service enquiries.
• Technical Data: When ordering online, we may collect information such as IP address, browser type, and device identifiers to ensure security and improve our service.

Lawful Basis for Processing Your Data

Flower Delivery Harlington processes your personal data only where we have a lawful basis to do so under GDPR. These include:

• Contractual Necessity: To fulfil your flower delivery order, including processing payments and arranging delivery.
• Legal Obligations: To comply with legal requirements, such as retaining transaction records for tax and accounting purposes.
• Legitimate Interests: To respond to your queries, improve our services, and prevent fraud, provided these interests are not overridden by your rights and freedoms.
• Consent: In certain circumstances, such as for direct marketing communications, we rely on your explicit consent, which you can withdraw at any time.

How We Use Your Personal Data

We use your personal information for the following purposes:

• Processing and delivering your flower orders according to your instructions.
• Communicating with you about your orders or responding to enquiries.
• Securely processing payments through trusted payment providers.
• Maintaining records for accounting and regulatory compliance.
• Improving our products and customer experience based on feedback and service interactions.
• Sending you service-related notifications.
• Where you consent, providing news, offers, or updates about our service; you may opt out at any time.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typically, we retain order and transaction information for up to seven years to comply with legal obligations. If you have registered an account with us, your data will be retained until you request deletion or your account is closed. For direct marketing, your preferences are respected and you may withdraw consent at any time.

Processors and Data Sharing

To enable our services, we may need to share your personal data with selected external processors. These include:

• Payment Processors: Secure handling of your payment information during transactions. We only use established payment gateways that are compliant with data protection standards.
• Delivery Partners: For delivering your order to your chosen address.
• IT and Cloud Providers: For secure data storage, website functionality, and email communication systems.
• Professional Advisers: Accountants, lawyers, and regulatory authorities where required by law.

All third-party processors are contractually required to handle your data confidentially and securely, in compliance with GDPR. We do not sell or rent your data to any third parties for marketing purposes.

Security of Your Data

We take appropriate technical and organizational steps to safeguard your personal data from unauthorized access, loss, or misuse. These include secure servers, data encryption, access controls, and regular staff training. While we strive to protect your information, please be aware that no data transmission over the internet is completely secure.

Your Rights Under GDPR

As an individual whose personal data we process, you have the following rights under GDPR:

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Correct inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your data when it is no longer needed or when you withdraw consent.
• Right to Restriction of Processing: Limit how your data is processed in certain situations.
• Right to Data Portability: Request a copy of your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Right to Lodge a Complaint: If you have concerns about how we handle your data, you can lodge a complaint with the UK data protection authority.

Exercising Your Rights

If you wish to exercise any of the rights detailed above, please contact us using the contact methods provided on our website or during your communications with us. We may need to verify your identity before processing certain requests, and we will respond promptly and in accordance with our legal obligations.

Changes to This Policy

We may update this Privacy Policy from time to time in response to changes in legal, technical, or business developments. The most recent version will always be available on our website. We encourage you to review this document periodically to remain informed of how we protect your data.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please use the contact details provided through our service channels. We are committed to addressing your privacy concerns and protecting your data in line with GDPR requirements.