Your Data and Privacy at Flower Delivery Southgate

Privacy Policy for Flower Delivery Southgate Orders

Introduction

This Privacy Policy explains how Flower Delivery Southgate ("we", "us", or "our") collects, uses, stores, and protects your personal data when you place orders with us from Southgate or the surrounding districts. Our commitment is to uphold your privacy rights and handle your data in compliance with the General Data Protection Regulation (GDPR).

Who This Policy Applies To

This Privacy Policy applies to all customers who place orders with Flower Delivery Southgate from Southgate and the adjacent districts. By using our services, you acknowledge and consent to the practices described within this policy.

What Data We Collect

We collect different types of personal data in connection with your orders and interactions with Flower Delivery Southgate. The types of data we may collect include:

Identification Data: Name and surname.
Contact Details: Delivery address, telephone number, and any contact preferences.
Order Information: Purchase details, delivery instructions, recipient details (including name, address, and contact information where provided).
Payment Information: Payment card details or payment confirmation (note: card details are processed via secure payment providers and are not stored by us).
Communications: Correspondence by phone, web forms, or in writing, including feedback and inquiries.
Technical Data: IP address, device type, browser type, and cookies (only as necessary for website operation and order processing).

Lawful Basis for Processing Your Data

Under GDPR, we process your personal data only where there is a lawful basis for doing so. The main lawful bases on which we rely are:

Contractual Necessity: To fulfill your order or provide the services you have requested, including processing and delivering products you purchase.
Legal Obligation: To meet our legal and regulatory requirements, such as maintaining financial records for accounting and tax purposes.
Legitimate Interests: For operational reasons, such as ensuring high-quality service delivery, securing our services, and preventing fraud. We ensure these interests are balanced with your rights and expectations.
Consent: Where applicable, such as for sending marketing communications (only if you have actively opted in). You can withdraw your consent at any time.

How We Use Your Data

Your personal information is used for the following purposes:

To process and deliver your flower orders accurately.
To communicate with you regarding your order status, delivery, or any issues arising from your purchase.
To provide customer support and resolve any inquiries or complaints.
To comply with our legal obligations and business record-keeping requirements.
To improve our services and ensure the security of our operations.
Where you have consented, to send you information about special offers and promotions.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Typically, we retain order details and related personal data for up to six years to comply with legal and accounting obligations. Personal data used for marketing is retained until you withdraw your consent or request its erasure.

Data Processors and Sharing

We may use trusted third-party service providers to help us deliver our services ("processors"). These may include payment processors, delivery partners, website hosting facilities, and IT support services. All such processors are required to maintain strict confidentiality and comply with GDPR standards. Your information will not be sold, shared, or disclosed to any other parties except as required by law or with your explicit consent. Some aggregated or anonymised data may be used internally for service improvement and business analysis.

Your Data Protection Rights

As a customer within the Southgate area or surrounding districts, you have the following rights under GDPR:

Right to Access: You may request copies of your personal information that we hold.
Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data where there is no longer a valid reason for us to keep it, subject to legal or contractual retention requirements.
Right to Restrict Processing: You can ask us to restrict the processing of your personal data in certain circumstances.
Right to Data Portability: Where technically feasible, you can request that we transfer your data to another service provider.
Right to Object: You have the right to object to our processing of your data where we rely on legitimate interests, or to direct marketing at any time.
Right to Withdraw Consent: Where you have provided consent for processing, you may withdraw it at any time; this does not affect processing carried out before consent withdrawal.

To exercise any of these rights, please contact us using the contact details provided on our website. We may need to verify your identity before responding to your request and will respond within one month, or as required by law.

Data Security

We are committed to ensuring the security and confidentiality of your personal data. Appropriate technical and organisational measures are in place to prevent unauthorised access, loss, misuse, or disclosure of your information. Only authorised personnel and trusted processors have access to personal information, and all are contractually obliged to respect its confidentiality.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The updated version will always be available on our website. We encourage you to review it regularly to remain informed on how we protect your privacy.

Contact and Concerns

If you have any questions or concerns regarding this Privacy Policy or how we handle your data, please contact us via the contact information displayed on our website. Should you consider that your rights under data protection law have not been observed, you are entitled to lodge a complaint with your local data protection authority.