Privacy Policy for Flower Delivery Hanwell Customers

Introduction

This Privacy Policy describes how Flower Delivery Hanwell collects, uses, and processes your personal data when you place orders from Hanwell and the surrounding districts. We are fully committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

Scope of Policy

This policy applies to all individuals who place orders with Flower Delivery Hanwell for flower deliveries within Hanwell and nearby areas. By using our services, you acknowledge and agree to the data practices described in this policy.

What Data We Collect

To process your orders and ensure efficient delivery, we may collect the following types of information:

  • Personal Identification Information: Name, address, telephone number, and other contact details.
  • Order Details: Recipient’s name, address, delivery instructions, and order history.
  • Payment Information: Information necessary to process payments (such as card details), which is typically handled through secure third-party payment processors.
  • Communication Data: Information from inquiries, feedback, or direct communications with us.
  • Website Usage Data: IP addresses, browser types, access times, and pages visited, collected through cookies or analytics tools.

Lawful Basis for Processing

We only collect and process your data where there is a lawful basis under the GDPR. These include:

  • Contractual Necessity: To fulfill flower delivery orders and related services.
  • Legal Obligations: To comply with legal and tax requirements.
  • Legitimate Interests: To improve our services, enhance customer experience, and prevent fraud.
  • Consent: Where required, for marketing communications and certain cookies, your explicit consent will be obtained.

How We Use Your Data

Your data may be used for the following purposes:

  • Processing and fulfilling your orders, including delivery to recipients.
  • Providing customer service and responding to your inquiries.
  • Communicating order updates and delivery confirmations.
  • Improving our website and services through analytics and feedback.
  • Meeting legal requirements, such as tax and transaction records.
  • Where permitted, sending you updates or offers related to our services.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, taking into account legal, accounting, and reporting requirements. Generally, personal data relating to orders is retained for up to six years to comply with legal obligations. Communication data is retained for a shorter period unless it needs to be kept for dispute resolution or compliance purposes. Once data is no longer required, it will be securely deleted or anonymized.

Data Processors and Third Parties

To provide our services, we may use third-party service providers ("processors") who process personal data on our behalf. These may include:

  • Payment processing companies
  • Delivery logistics partners
  • IT and hosting service providers
  • Professional advisors (e.g., accountants or auditors)

We ensure all processors comply with GDPR requirements, including processing data only as instructed, maintaining security, and not retaining data longer than necessary. We do not sell or rent your personal data to any third parties for marketing purposes.

International Data Transfers

Your data is generally processed within the United Kingdom and European Economic Area (EEA). If data is transferred outside these areas (for example, for cloud hosting), we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Securing Your Data

We take the security of your data seriously. Technical and organizational measures are implemented to prevent unauthorized access, loss, disclosure, or alteration of your personal data. These include secure storage, regular security reviews, and limited staff access to sensitive information.

Your Rights Under GDPR

Under the GDPR, you have several rights regarding your personal data:

  • Right to Access: You may request access to the personal data we hold about you.
  • Right to Rectification: You can ask us to correct or update any inaccurate data.
  • Right to Erasure: Also known as "the right to be forgotten," you may request deletion of your data in certain circumstances.
  • Right to Restrict Processing: You can request we limit how your data is used.
  • Right to Data Portability: You have the right to receive your data in a structured, commonly used format and to transfer it to another provider.
  • Right to Object: You can object to the processing of your data in some situations, such as for direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us using the contact form or postal address provided on our website. We may need to verify your identity before responding to your request and will address your query within the timeframes required by law.

Updates to This Policy

We may review and update this Privacy Policy periodically to reflect changes in the law or our practices. The updated version will be available on our website with a revised effective date. We encourage you to review this policy from time to time to stay informed of how we protect your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy or how your data is handled, you can contact us through the contact page on our website. If you are unhappy with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.

Thank you for trusting Flower Delivery Hanwell with your personal data. We are committed to safeguarding your privacy at all times.