Flower Delivery South Croydon Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery South Croydon (“we”, “our”, or “us”) processes personal information relating to customers who place flower delivery orders in South Croydon and its surrounding districts. The policy outlines what personal data we collect, the lawful basis for processing, retention periods, use of processors, and your rights under the UK General Data Protection Regulation (UK GDPR).

Scope of the Policy

This policy applies to all customers who order flower deliveries for delivery in South Croydon and neighbouring areas. By placing an order, you agree to the practices set forth in this Privacy Policy.

What Data We Collect

We collect the following types of personal data as necessary to fulfill our flower delivery services:

• Contact Information: Your name, address, phone number, and (if applicable) details of the recipient (name, delivery address, contact number).
• Order Details: Information about your order, such as order content, gift messages, delivery preferences, and instructions.
• Payment Information: Data required to process payment (e.g., last four digits of your payment card, payment status). Full payment card details are processed securely by our payment processor and are not retained by us.
• Account Information (if applicable): Your email address and password if you choose to create an account.
• Communication Data: Records of correspondence, customer support queries, and feedback you provide to us regarding your order.
• Technical Data: IP address, browser type, device information, and cookie data collected when you visit our website for security, analytics, and service improvement purposes.

Lawful Bases for Data Processing

Under the UK GDPR, we process personal data on the following lawful bases:

• Contractual Necessity: Most personal data is collected and processed to fulfill our contract with you—the delivery of your flower order.
• Legal Obligation: We may retain transaction records for accounting and legal compliance purposes.
• Legitimate Interests: We may use data for operational purposes, such as fraud prevention, business analysis, or customer satisfaction, provided such use does not override your rights or interests.
• Consent: Where required (such as for direct marketing), we seek your explicit consent, and you may withdraw this consent at any time.

How We Use Your Data

Your information is used for:

• Processing and delivering your flower order to the correct recipient and address.
• Communicating with you regarding your order (such as order confirmation, delivery status, updates, or customer support).
• Fulfilling administrative, accounting or legal requirements.
• Improving our services, ensuring website security, and conducting internal analytics.
• Only where consent has been given, sending you promotional offers and updates relevant to Flower Delivery South Croydon.

Data Retention

Your personal data is retained only as long as necessary to fulfil the purposes outlined in this policy:

• Order Information: Retained for up to 7 years from the date of transaction, in line with legal and accounting obligations.
• Account Information: For customers registered with an account, your data is stored until you close your account or request deletion, unless otherwise required by law.
• Correspondence: Communications related to customer support are typically retained for up to 2 years for service improvement and dispute resolution.
• Technical and Analytics Data: Retained for no longer than 26 months for analytical and security purposes.

Processors and Third Parties

We engage trusted third-party processors to support service delivery. These may include:

• Payment Providers: To process and secure card payments for your orders. Payment providers operate independently and only share transaction status and reference data with us.
• Delivery Partners: To ensure timely and correct handover of your flower order, we share necessary delivery information with relevant courier networks or our in-house drivers.
• IT and Hosting Providers: For secure hosting of our website and maintenance of our systems.
• Analytical Software Providers: For internal analytics and improvement of the user experience, in anonymized or pseudonymized formats where possible.

All processors are bound by contract to process your personal data only as instructed by us, and to maintain appropriate technical and organisational security measures.

International Data Transfers

We strive to keep your data within the UK or European Economic Area (EEA) wherever possible. Should your data be transferred outside these jurisdictions (for example, for IT hosting), such transfers are protected by appropriate safeguards to ensure your rights and freedoms are maintained.

Cookies and Tracking Technologies

Our website uses necessary cookies for function and security, as well as (with your consent) analytical cookies for performance and marketing purposes. You can manage your cookie preferences at any time using our cookie management tool on the website.

Your Data Protection Rights

As a customer of Flower Delivery South Croydon, you have rights regarding your personal information, including:

• Access: The right to request copies of your personal data held by us.
• Rectification: The right to ask us to correct or complete inaccurate or incomplete data.
• Erasure: The right to request the deletion of your personal data where we no longer have a valid reason to retain it.
• Restriction: The right to request that we limit the processing of your data in certain circumstances.
• Objection: The right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes.
• Portability: The right to request that your personal data be transferred to another organisation or provided to you in a commonly used, machine-readable format.
• Withdrawal of Consent: Where processing relies on your consent, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us through the communication options available on our website. We may ask you to verify your identity before responding to your request. In most cases, we will respond within one month.

Security Measures

We employ technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. This includes secure website protocols, regular staff training, restricted access, and data encryption where appropriate.

Children’s Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data belonging to a minor, we will promptly delete such information.

Changes to This Policy

This Privacy Policy may be updated from time to time in line with changes to laws, regulations, or our operational practices. Any significant updates will be communicated on our website. Please check this policy regularly to stay informed.

Contact and Complaints

If you have any questions regarding how we process your personal data, or wish to raise a complaint about our privacy practices, you may contact us through our website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your rights have been infringed.