Flower Delivery Alperton GDPR Privacy Policy

Privacy Policy Overview

This Privacy Policy informs you about how Flower Delivery Alperton ('we', 'us', or 'our') collects, uses, stores, and protects your personal data when you place flower delivery orders in Alperton and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and any applicable UK data protection laws. This policy applies to all customers who order from us, whether through our website, by phone, or in person.

What Data We Collect

We collect and process the following types of personal data to fulfil your flower delivery orders and provide our services:

• Identity Data: Name, surname, and (where applicable) customer account details.
• Contact Data: Delivery address, billing address, telephone number, and any alternative contact information you provide.
• Order Details: Details of your floral purchase, special instructions, and delivery preferences.
• Payment Information: Card details or other payment method data supplied at checkout (processed securely through accredited third-party payment processors; we do not store your full payment card details).
• Communications: Records of correspondence, including emails and notes from any phone enquiries or complaint handling.
• Technical Data: IP address, browser type, and usage statistics (when you use our online service or website).

The Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on one or more of the following lawful bases:

• Contract: Processing is necessary to fulfill your flower delivery order or to take steps at your request before entering into a contract.
• Legal Obligation: We must process certain data to comply with legal and regulatory requirements (e.g., record-keeping for financial purposes).
• Legitimate Interests: Processing such as keeping records of sales, customer service, and business improvement, provided that our interests do not override your fundamental rights and freedoms.
• Consent: Where required, we may seek your consent for specific uses, such as for marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Your data will only be used for the following purposes:

• Processing and delivering your flower orders.
• Managing payments and refunds.
• Responding to your queries, feedback, or complaints.
• Customer support and communication regarding your orders.
• Complying with legal and regulatory obligations.
• Internal analysis for service improvement (such as to enhance our delivery times or product offerings).
• If you opt in, sending you marketing or promotional materials related to Flower Delivery Alperton. You can opt-out at any time.

Data Sharing and Processors

We do not sell or exchange your personal data with third parties for marketing purposes. However, to facilitate our services, we may share your data with trusted third-party service providers ('processors'), including:

• Payment Processors: Accredited providers securely handle your payments and refunds.
• Delivery Partners: Third-party couriers or drivers who deliver your order to your specified address.
• IT and System Support: Companies providing technical infrastructure, hosting, or customer support platforms.

All processors are contractually obligated to handle your data in a secure and confidential manner, in compliance with GDPR. We require that they only process your data for the specific tasks requested and do not use it for their own unrelated purposes.

International Data Transfers

In most cases, your data is processed and stored within the UK or European Economic Area (EEA). Where processors are located outside these areas, we ensure appropriate safeguards are in place to protect your information, such as using approved contractual clauses or adequate data protection measures.

Data Retention Periods

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For most customer records and transaction data, this retention period is up to six years from the date of your last order, unless a longer retention period is required or permitted by law. Once data is no longer required, it is securely deleted or anonymised.

Your Rights under GDPR

As a data subject within the EEA or UK, you have the following rights:

• Right of Access: Request a copy of your personal data that we hold.
• Right to Rectification: Correct inaccuracies in your data.
• Right to Erasure: Request the deletion of your data in certain circumstances (‘right to be forgotten’).
• Right to Restrict Processing: Request that we limit how we use your data in certain situations.
• Right to Data Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Rights regarding Automated Decision-Making: You have the right to not be subject to decisions based solely on automated processing unless necessary for your contract with us.

If you would like to exercise any of your rights, please contact us using the details provided on our website or ordering platform. For certain requests, we may need to confirm your identity before acting.

Security Measures

We have robust security measures in place to protect your personal data against accidental loss, misuse, or unauthorised access. These measures include secure servers, data encryption during payment processing, regular staff training, and carefully selected processors. Despite our best efforts, no system can guarantee 100% security; however, we take data protection seriously and continually review our processes.

Children’s Data

Our services are not intended for use by children under the age of 16. We do not knowingly collect or store data from children without verified parental consent.

Changes to This Privacy Policy

Flower Delivery Alperton may update this policy periodically to reflect changes in practice or legal requirements. The revised policy will be effective from the date it is posted. Customers are encouraged to review this policy regularly for updates.

Contact & Complaints

If you have questions about this Privacy Policy or about how we handle your personal data, please contact us using the details provided on our website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority if you believe we have not complied with data protection laws.