Flower Delivery South Woodford Privacy Policy

Introduction

This Privacy Policy details how Flower Delivery South Woodford collects, processes, and protects personal information for customers placing flower delivery orders within South Woodford and its neighbouring districts. Committed to upholding the highest standards of privacy and data protection, we abide by the General Data Protection Regulation (GDPR) and relevant UK laws to ensure the safety and fair use of your personal data.

Scope of This Policy

This Privacy Policy applies to all customers ordering flowers from Flower Delivery South Woodford, whether orders are placed online, by phone, or via other means, and covers delivery to addresses in South Woodford and surrounding local areas.

Information We Collect

To successfully complete your flower order, deliver your goods, provide customer service, and comply with legal requirements, we may collect the following categories of personal data:

  • Identity Data: Full name, delivery recipient name, title.
  • Contact Data: Billing and delivery addresses, telephone number, and where applicable, alternative contact persons to facilitate delivery.
  • Order and Transaction Data: Details of orders placed, order history, payment status (but not full card details), and any special delivery notes.
  • Payment Data: Payment method information (e.g. last four digits of cards, payment reference numbers). Full payment card data is securely handled exclusively by approved payment processors and is not accessible to us.
  • Correspondence Data: Records of contact made with us, including any communications regarding product enquiries, feedback, or after-care service.

How We Use Your Data and Our Lawful Basis

We only process your personal information where we have a valid legal basis to do so under GDPR. The principal bases applicable to Flower Delivery South Woodford are:

  • Performance of Contract: To process and fulfill your flower delivery orders, including payment processing, order confirmation, delivery scheduling, and providing updates regarding your order.
  • Legitimate Interests: To improve our services, respond to enquiries, handle complaints, and maintain business records. We take care to balance these interests against your rights and freedoms.
  • Legal Obligations: To comply with tax, accounting, and other statutory obligations, and to respond to lawful requests by public authorities.
  • Consent: In situations where we seek your explicit agreement (for example, for specific forms of marketing), you may withdraw your consent at any time by contacting us using the methods outlined at the end of this policy.

How Long We Retain Your Data

We retain personal data only for as long as is necessary for the purpose for which it was collected, including for purposes of legal, accounting, and reporting requirements. Key retention periods are as follows:

  • Order and transaction data: Retained for up to 6 years after the tax year in which your order was placed, to fulfil legal and reporting obligations.
  • Customer support and communications data: Retained for up to 3 years following the final resolution of your enquiry or complaint.

Upon expiry of these periods, personal data is securely deleted or anonymised. If there are any statutory retention requirements, we may store the information for a longer period only as required by law. Credit and debit card information is never retained or accessible to us after your payment is processed.

Our Data Processors and Data Sharing

We use third-party service providers to deliver key aspects of our service. These companies only have access to your information as necessary to perform their roles, are bound by contract to process your data securely, and are not permitted to use it for their own purposes. Our key processors include:

  • Payment Processors: Securely process payments on our behalf. We do not store your card details after transaction completion.
  • Delivery Partners: Courier or postal services responsible for ensuring the safe and timely delivery of your flowers.
  • IT and Hosting Providers: Companies providing website, order management and email systems to facilitate customer interactions and data security.

Your data is not routinely transferred outside the UK. Where international transfer is unavoidable (such as with some IT providers), we use only partners meeting GDPR adequacy standards and implement appropriate safeguards.

User Rights Under GDPR

As a data subject under UK and EU GDPR, you have the following rights in relation to your personal data held by Flower Delivery South Woodford:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request that we correct any inaccurate or incomplete data.
  • Right to Erasure: Ask for your data to be erased where it is no longer needed, subject to our legal obligations to retain certain information.
  • Right to Restrict Processing: Ask that we suspend the processing of your data in certain circumstances.
  • Right to Data Portability: Request your data in a structured, commonly-used format to take elsewhere.
  • Right to Object: Object to processing where our lawful basis is legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent, you can withdraw this at any time.

To exercise any of your data rights, or if you have questions about how we handle your personal data, please contact us using the details provided at the end of this Policy or through our website.

How We Protect Your Information

We maintain technical and organisational measures to safeguard your personal data against unauthorised access, disclosure, alteration or destruction. These include the use of secure servers, encryption of data in transit, regular security assessments, access controls, and staff privacy training. Only those personnel and processors who need access to deliver our service to you are permitted to view your personal data.

Updates to This Policy

We review and update this policy regularly in line with changes to our business, data protection law, or new data processing activities. Any substantial changes will be flagged on our website and, where appropriate, communicated directly to customers with open orders. Please revisit this page periodically to ensure you remain informed about how we process your information.

Contact and Complaints

If you have any questions or wish to exercise your rights in relation to your personal data, please refer to our Contact section on the Flower Delivery South Woodford website. Additionally, you have the right to raise concerns with the UK’s data protection supervisory authority, the Information Commissioner’s Office (ICO), if you believe your data has been processed unlawfully or your rights have been infringed.