Privacy Policy for Flower Delivery Westcombe Park Customers

About This Privacy Policy

This Privacy Policy explains how Flower Delivery Westcombe Park collects, uses, stores, shares, and protects your personal data. This policy applies to all individuals placing orders with Flower Delivery Westcombe Park in Westcombe Park and the surrounding districts. We are committed to maintaining your privacy and managing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) as well as relevant UK data protection laws.

Data We Collect

When you place an order or interact with Flower Delivery Westcombe Park, we may collect the following types of data:

• Identity Data: Your name, and (if relevant) the recipient's name.
• Contact Data: Address, postcode, and telephone number for delivery and/or billing purposes.
• Order Data: Details of your flower order, delivery instructions, card messages, and order history.
• Payment Data: Transaction details (such as partial credit or debit card numbers, payment status), but we do not retain full card details—these are securely processed by our payment processor.
• Technical Data: Information about your device, IP address, browser type and version, and cookies (if you use our website).
• Correspondence: Any communications or feedback you send to us.

Lawful Basis for Processing

Flower Delivery Westcombe Park processes your personal data based on the following lawful bases as defined by the GDPR:

• Contractual Necessity: We require your data to take steps to enter into and fulfil our contract with you (e.g., processing and delivering your order).
• Legal Obligation: We may process your information to comply with applicable legal obligations (e.g., record-keeping for tax purposes).
• Legitimate Interests: We process data to improve our services, respond to customer enquiries or feedback, and to use analytics to monitor website usage. These interests are balanced against your rights and freedoms.
• Consent: For any marketing communications or use of certain types of cookies, we rely on your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• To process and deliver flower orders to you or your recipients.
• To communicate with you regarding your order, any queries, or follow-up support.
• To process payments and refunds securely.
• To comply with legal obligations such as tax and accounting regulations.
• To improve our website, products, and customer experience.
• With your consent, to send you information about offers or promotions. You can opt out at any time.

Who Processes Your Data

We share your data only when necessary and only with trusted third-party processors who assist us in providing our services, including:

• Payment Processors: Secure payment gateways for processing card transactions. We do not retain your full payment card details on our systems.
• IT and System Providers: Providers of website hosting, data storage, email, and communication platforms.
• Couriers or Delivery Services: For fulfilling local flower deliveries.
• Professional Advisors: Such as accountants or legal advisors, when required for compliance or dispute resolution.

All third-party service providers are required to respect the confidentiality of your data and to process it in accordance with the GDPR and our instructions. Your personal data is never sold or disclosed for unrelated marketing purposes.

Data Retention

Your personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. In practice, this means:

• Order and delivery records are typically retained for up to seven years to comply with tax and accounting requirements.
• If you contact us with a query or feedback, correspondence is normally retained for up to two years.
• Where consent has been given for marketing communications, we will continue to hold and use this data until you withdraw your consent or request erasure.
• Some anonymised statistical data may be retained longer for business analysis.

When personal data is no longer needed, it will be securely deleted or anonymised.

Your Rights Under GDPR

Under the GDPR, as a data subject, you have several rights regarding how we process your personal data:

• Right of Access: You can ask us for a copy of your personal data.
• Right to Rectification: You have the right to correct inaccurate or incomplete data about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can ask us to restrict how we use your data.
• Right to Data Portability: You can request we provide your data in a commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If consent is the lawful basis for processing, you may withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us using the contact methods outlined at the bottom of this policy or on our website. We may need to verify your identity before fulfilling certain requests.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. This includes secure hosting of our website, encrypted connections, limited access controls, and regular reviews of our processing procedures.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on our website, and we encourage you to review this policy periodically to stay informed about how we protect your data.

Contacting Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your data protection rights, please refer to the contact information provided on our website. We are committed to responding promptly and helping you resolve any concerns regarding your personal data.