Privacy Policy for Flower Delivery Barking

Introduction

This Privacy Policy outlines how Flower Delivery Barking collects, uses, stores, and protects the personal data of customers in Barking and surrounding districts, in compliance with the General Data Protection Regulation (GDPR). The policy applies whenever you place an order with us, whether through our website, over the phone, or in-person.

What Data We Collect

When you place an order or interact with Flower Delivery Barking, we collect various types of personal data to provide our services effectively. The types of data we may collect include:

• Contact Information: Your name, billing and delivery addresses, and phone number.
• Order Details: Details of your order, including flower selections, gift messages, delivery instructions, and payment confirmation (but not your payment card details, which are processed securely by third parties).
• Recipient Information: Name, address, and phone number of the person receiving the order.
• Communication Records: Any correspondence between you and us, including inquiries, feedback, or complaints.
• Technical Data: IP address, browser type, operating system, and usage information collected through cookies (for website users).

Lawful Basis for Processing Your Data

Under GDPR, we must have a valid legal reason to process your personal data. Flower Delivery Barking processes your data on the following grounds:

• Contractual Obligation: Most data is processed because it is necessary to fulfill your order and provide customer service, as part of our contract with you.
• Legitimate Interest: We may use your contact information to send service-related communications or essential updates regarding your order.
• Legal Obligation: We may need to retain some records to comply with legal and tax requirements.
• Consent: We seek your explicit permission for any marketing communications. You can withdraw consent at any time.

How We Use Your Data

Your data is used to:

• Process and fulfill your flower delivery orders
• Deliver flowers and other ordered items to the recipient
• Communicate with you about your order status or customer service matters
• Respond to your queries, requests, or feedback
• Comply with applicable laws and regulations
• Improve our services and customer experience

Retention of Your Data

We only keep your personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations. Generally, order and transaction data are retained for up to 7 years to meet record-keeping regulations. Communication records are typically kept for a maximum of 2 years unless required for contractual or legal reasons. After these periods, your data is securely deleted or anonymised.

Sharing & Processing by Third Parties

To fulfill your orders and operate our business, we may share your personal data with select third-party service providers ("processors"), including:

• Delivery partners and couriers (to deliver your order to you or the intended recipient)
• Payment processing companies (to process your payment securely)
• IT and system administration providers (to host and support our website and systems)
• Professional advisers (such as accountants and legal advisers, if required by law)

All processors are required to take adequate measures to ensure the security and confidentiality of your data and to process it only as directed by Flower Delivery Barking. Personal data is not shared with any third parties for their own marketing purposes.

Data Security

We implement appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, accessed, altered, or disclosed in an unauthorised way. All third-party processors are carefully selected and contractually bound to maintain the same standards of security and data protection.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: In certain circumstances, request deletion of your data.
• Right to Restrict Processing: Ask us to stop processing your data in certain situations.
• Right to Data Portability: Receive your data in a structured, commonly used electronic format, or request we transfer it to another provider, where feasible.
• Right to Object: Object to the processing of your personal data for direct marketing or on grounds relating to your particular situation.
• Right to Withdraw Consent: Withdraw consent at any time, where processing is based on consent.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect or process personal data of children. If you believe a child has provided us with personal information, please contact us and we will delete the information as promptly as possible.

Changes to Our Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in the law, our business practices, or the way we process your data. Updated versions will be made available through our website or on request. We encourage you to review this policy periodically to remain informed.

Contact & Complaints

If you wish to exercise your rights, have questions about this policy, or are concerned about our handling of your personal data, please get in touch through our official contact channels. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.