Flower Delivery Whetstone Privacy Policy

Introduction

At Flower Delivery Whetstone, we are committed to safeguarding the privacy of our customers and ensuring transparency regarding how your personal data is collected, used, stored, and protected. This Privacy Policy applies to all customers who place orders with Flower Delivery Whetstone in Whetstone and surrounding districts. We adhere strictly to the requirements of the UK General Data Protection Regulation (GDPR) and other relevant data protection legislation.

What Personal Data We Collect

We may collect and process the following types of personal data from you when you place a flower delivery order or interact with Flower Delivery Whetstone:

• Identity Data: Full name.
• Contact Data: Delivery address, billing address, telephone number, and contact instructions.
• Order Data: Details of products ordered, delivery instructions, notes, and transaction history.
• Payment Data: Limited payment information (such as card type and partial card numbers or references) handled securely by our payment processors.
• Communication Data: Emails, messages, and feedback relating to your order.
• Technical Data: IP address, browser type, and usage data when you visit our website.

Lawful Bases for Processing Personal Data

We process your personal data legally in accordance with the GDPR. The principal lawful bases for processing your data include:

• Contractual Necessity: To process your order, facilitate payment, deliver products, and communicate with you regarding your order.
• Legal Obligation: To comply with legal or regulatory requirements (for example, keeping records for tax purposes).
• Legitimate Interests: To improve our products, services, and user experience, provided these interests do not override your rights and freedoms.
• Consent: Where required, for example, for direct marketing communications, which you may opt-in to and withdraw at any time.

How We Use Your Personal Data

Your information is used primarily to process and deliver your flower orders, manage your customer relationship, and ensure the best possible service. Specifically, we use your data to:

• Fulfil and deliver your orders efficiently and correctly.
• Communicate order confirmations, updates, and respond to your queries.
• Process payments and refunds securely.
• Maintain records for regulatory and accounting purposes.
• Enhance and personalise our services to better serve your needs.
• Send promotional information with your consent.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The most common retention periods are:

• Order Data and Contact Information: Retained for up to 7 years after your last order to comply with tax and accounting regulations.
• Payment Data: Stored only as required for transaction verification or dispute resolution, never beyond the period required by law.
• Marketing Data: Retained until you withdraw your consent or opt-out of marketing communications.

After the applicable retention period, your data is securely deleted or anonymised.

Data Processors and Third Parties

To provide our services, we may share your personal data with trusted third-party processors and partners. These may include:

• Payment service providers: For secure payment processing.
• Delivery partners: For arranging and executing deliveries.
• IT and website hosting providers: To safeguard our digital infrastructure and services.
• Professional advisors: Such as accountants or insurers for regulatory compliance.

All third parties handling your data are required to process it securely, only for the intended purpose, and in accordance with GDPR. We never sell your data or share it with unauthorised parties.

International Data Transfers

We endeavour to keep your data within the UK and the European Economic Area (EEA). If it is necessary to transfer your data outside these regions, we ensure appropriate safeguards are in place as required by the GDPR, such as standard contractual clauses or equivalent measures, to protect your privacy rights.

Your Data Protection Rights

You have several rights relating to the personal data we hold about you. These include the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data, subject to legal and contractual obligations.
• Restriction: Request restriction of processing where applicable.
• Data Portability: Request that we transfer your data to another service provider, where technically feasible.
• Object: Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: Withdraw consent for processing, where relied upon, at any time.

To exercise any of these rights, please contact us using the details provided on our website.

How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include secure servers, encryption, and access controls. All staff members and partners handling your data are trained in data protection principles and bound by confidentiality obligations.

Updates to this Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in practices, legislation, or for other operational reasons. When updates are made, the revised policy will be displayed on our website, and the revision date will be updated accordingly. We advise you review this policy from time to time to stay informed about how we protect your information.

Contact and Complaints

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please use the contact information provided on our website. If you are not satisfied with our response, you may also lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

Your trust is important to us, and we are dedicated to keeping your personal data safe and respecting your privacy at all times.