Flower Delivery Brompton GDPR Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Brompton (“we”, “our”, “us”) collects, retains, and processes personal data when you place flower delivery orders in Brompton and surrounding districts. By using our services, you entrust us with your personal information, and we are committed to handling it transparently and in accordance with the General Data Protection Regulation (GDPR) and relevant UK privacy laws.

Scope of Policy

This policy applies to all individuals who order flower delivery from Flower Delivery Brompton, whether online, over the phone, or in person, for deliveries within Brompton and its surrounding areas. Our practices described herein reflect our approach to data protection for all customers using our services in these locations.

What Data We Collect

We collect and process a variety of personal data to provide and manage our flower delivery services. The types of data we collect include:

• Identity Data: Full name (customer and recipient, if different), title.
• Contact Data: Delivery address, billing address, phone number, and in some cases, delivery instructions.
• Order Data: Details of the products ordered, special requests, purchase history, order dates, and order values.
• Payment Data: Payment method, card details (handled securely via payment processors), and transaction references.
• Technical Data: IP address, browser type and version, and usage data (if ordering online).
• Correspondence: Records of communications with our customer service (e.g., queries, feedback, complaints).

Lawful Basis for Data Processing

Under the GDPR, we must have a lawful basis for processing your personal data. The principal bases on which we process your data are:

• Contractual Necessity: Most data collection (such as name, address, and payment details) is necessary to fulfil your order and deliver your products.
• Legal Obligations: We may retain some details for tax, accounting, and regulatory compliance purposes.
• Legitimate Interests: We may use your data to improve our services, handle queries, and keep records of transactions for business purposes, as long as your rights and freedoms are not overridden.
• Consent: For direct marketing communications, we will only use your data if you have given us explicit permission, which you can withdraw at any time.

How We Use Your Data

Your personal data is used in a number of ways, including:

• Processing your order and arranging delivery of your flowers.
• Providing customer support and responding to your requests or inquiries.
• Completing secure payments for orders.
• Improving our products, services, and the user experience.
• Complying with legal and regulatory requirements.
• With your consent, sending newsletters, offers, or updates about our business (you may opt out at any time).

Retention of Personal Data

We retain your information only as long as necessary to fulfil the purposes set out in this Privacy Policy or to comply with legal, regulatory, or statutory obligations. Our retention periods are defined as follows:

• Order and Transaction Data: Retained for up to 7 years to comply with tax and accounting laws.
• Correspondence: Stored for up to 2 years for quality assurance and to address any post-order queries.
• Marketing Data: Kept until you withdraw your consent or unsubscribe from communications.

After these periods, personal data is securely deleted or anonymised.

Processors and Data Sharing

We engage third-party service providers (‘processors’) to support the delivery of our services. These processors act on our behalf and include:

• Payment processing companies (for secure card payments).
• Couriers and delivery drivers (to fulfil deliveries).
• IT infrastructure and website hosting providers.
• Customer service platforms.

Each processor is carefully selected and bound by agreement to handle your data safely and exclusively under our instructions, ensuring your privacy and security. We do not sell or rent your personal data to third parties. We only disclose your details to other parties where:

• It is essential to the provision of your service (e.g., to couriers).
• We are legally required to do so.
• You have provided consent.

Data Security Measures

We implement appropriate organisational and technical security measures to protect your personal data from accidental loss, unauthorised access, alteration, disclosure, or destruction. This includes encrypted transmission of payment data, restricted access to data, regular security reviews, and staff training in data protection best practices.

Your Rights Under GDPR

You have several rights under GDPR regarding your personal data:

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Ask us to delete your data (‘right to be forgotten’) in certain circumstances.
• Right to Restrict Processing: Ask us to restrict or suppress your data in specific situations.
• Right to Data Portability: Obtain your data in a machine-readable format for transfer to another provider.
• Right to Object: Object to us processing your data, particularly for marketing purposes.
• Right to Withdraw Consent: Where we rely on consent for processing, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us through our customer support channels. We will respond to all requests within one calendar month.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in how we process your data or to comply with regulatory requirements. The most recent version will always be available upon request or on our website. Significant changes will be communicated to customers as appropriate.

Contact & Further Information

Your privacy matters to Flower Delivery Brompton. For any queries, requests, or concerns about how your data is handled, including complaints, please reach out to our customer service team. We welcome your feedback and are dedicated to resolving your concerns promptly and transparently.

By placing an order through Flower Delivery Brompton, you acknowledge that you have read and understood this Privacy Policy.