Flower Delivery Old Malden Privacy Policy

Our Commitment to Your Privacy

At Flower Delivery Old Malden, protecting your personal data is a central commitment. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders for flower delivery services in Old Malden and the surrounding districts.

Scope of This Policy

This Privacy Policy covers all individuals who place orders or otherwise interact with Flower Delivery Old Malden while residing in, or sending flowers to, Old Malden and nearby areas. It applies whether you place your order online, via telephone, or through other means offered by our business.

What Personal Data We Collect

To provide our flower delivery services, we may collect and process the following categories of personal data:

• Identity Data: such as your name and, if required, recipient names.
• Contact Data: including delivery addresses, billing addresses, and, where applicable, telephone numbers.
• Order Information: including order details, delivery instructions, and preferences for bouquets or gifts.
• Payment Data: such as the payment method used; please note, full card details are not stored following payment processing.
• Device and Technical Data: including IP address, browser type, device information, and cookies used for website functionality and analytics.
• Communication Data: including feedback, complaints, and correspondence with our customer service team.

Lawful Basis for Processing Your Data

We process your personal data under the following lawful bases, as defined by the GDPR:

• Performance of a Contract: Most data we collect is necessary for us to fulfill your order and deliver flowers as requested.
• Legal Obligations: Some data is retained and processed to comply with applicable laws, such as tax or accounting requirements.
• Legitimate Interests: We may process data to improve our services, resolve queries, or send certain non-marketing communications relevant to your order.
• Consent: We will request your explicit consent before sending any marketing communications or for the use of certain cookies not necessary for website operation.

How We Use Your Personal Data

Your data is used solely for purposes connected to flower delivery services, including:

• Processing your orders and arranging fulfillment.
• Contacting you about your orders or if issues arise with your delivery.
• Personalising your experience with us, such as storing preferences for future orders.
• Improving our website and services through analysis of anonymised usage data.
• Complying with legal and regulatory obligations.

Data Retention Periods

Your personal data will be retained only as long as necessary for the purposes described in this policy and to comply with legal obligations. Typically, we retain order and contact data for up to seven years to satisfy accounting and legal requirements. Payment processing data is not stored by us once a transaction is completed. Communication records are generally retained for up to two years to address follow-up queries or complaints.

Processors and Data Sharing

In the course of our operations, we may engage third-party service providers (processors) to facilitate order payments, website functionality, order delivery, and IT support. Each processor is vetted to ensure GDPR-compliance and required to implement appropriate technical and organisational measures to protect your personal data.

We do not sell or lease your personal data to third parties. Occasions where sharing your data is necessary include:

• Sharing your name and address with our trusted delivery partners to fulfil your order.
• Making essential information available to payment processing providers to secure payment.
• In the event of a legal requirement, to law enforcement or regulatory bodies.

Your Rights Under GDPR

As an individual whose data is processed by Flower Delivery Old Malden, you have several rights under the GDPR:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct or complete your personal data if it is inaccurate or incomplete.
• Right to Erasure: Also known as the ‘right to be forgotten’, you can request deletion of your data provided it is not required for ongoing contractual, legal, or regulatory obligations.
• Right to Restriction: You can ask us to restrict processing of your data in certain circumstances.
• Right to Data Portability: Where applicable, you may request that we transfer your data to another provider.
• Right to Object: You can object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, you may contact us via the methods described on our website or through written request. We will respond to all legitimate requests within one month, as required by law.

Security of Your Data

We take the protection of your data seriously and employ suitable physical, electronic, and managerial safeguards to secure and protect information. This includes securing our website, limiting access to personal data, and ensuring all processors comply with high standards of security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When changes are made, the updated version will be published on our website. Please review this policy periodically to remain informed of how your data is protected.

Contact and Concerns

To address questions, exercise your rights, or raise concerns regarding this privacy policy or the handling of your personal data, please refer to the contact details on our website or write to us at our business address. Should you remain dissatisfied, you may also contact your local data protection supervisory authority.