Privacy Policy for Customers of Flower Delivery Biggin Hill

Introduction

This Privacy Policy explains how Flower Delivery Biggin Hill collects, uses, stores, and protects your personal data when you place an order with us. It applies to all customers making flower delivery orders in Biggin Hill and its surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR), ensuring your information is handled transparently and securely.

Who We Are

Flower Delivery Biggin Hill is the data controller of your personal data for the purposes outlined in this policy. Our principal activity is providing flower delivery services within Biggin Hill and the neighboring areas.

What Personal Data We Collect

When you place an order or interact with Flower Delivery Biggin Hill, we may collect the following types of personal data:

• Contact Information: Name, delivery address, billing address, postcode, phone number (for delivery updates), and email address.
• Order Details: Flower selections, recipient name and delivery address, personalized card messages, and any special instructions.
• Payment Information: Payment confirmation details, though all card payments are processed by certified third-party processors; we do not store full card details ourselves.
• Usage Data: Information on how you use our website, including order history and preferences.

Lawful Basis for Processing

Flower Delivery Biggin Hill processes your personal data under the following lawful bases, as permitted by GDPR:

• Contractual Necessity: We process your data to fulfill and deliver your orders, and to communicate order-related information to you.
• Legitimate Interest: We may use your data to improve our services, for record keeping, and to prevent fraud, provided these interests are not overridden by your rights.
• Legal Obligations: Where required, we may process data to meet obligations under applicable laws (e.g., for tax or accounting purposes).
• Consent: For optional marketing messages, we will request your consent, and you can withdraw your consent at any time.

How We Use Your Data

Your personal data is used only for the purposes for which it was collected, including:

• Processing and fulfilling your flower delivery orders.
• Communicating with you about your order (confirmation, dispatch, status updates).
• Delivering flowers to the designated recipient as per your request.
• Providing customer service and handling queries or complaints.
• Maintaining internal records, analytics, and operational performance.
• Complying with legal or regulatory requirements.
• Sending relevant marketing communications, but only if you have opted in.

Who Processes Your Data

To deliver our service efficiently, we sometimes share your personal data with trusted third parties (data processors) such as:

• Payment service providers: To process payments securely on our behalf.
• Delivery partners or couriers: To deliver your flowers to recipients.
• IT and website hosting providers: To manage and support our website and systems.
• Accounting partners: For lawful record keeping and compliance.

All third-party processors are carefully selected and are required to process your data in accordance with our instructions, only for the specified purposes, and with appropriate security measures in place.

How Long We Keep Your Data (Retention)

We store your personal data only for as long as necessary for the purposes of fulfilling your orders and meeting our legal and contractual obligations:

• Contact, order, and delivery records are generally retained for six years to comply with accounting and tax regulations.
• Marketing data is kept only as long as your consent is valid or until you opt out.
• If you initiate an order but do not complete it, your data may be deleted within twelve months unless required for fraud prevention or compliance.

Once your data is no longer needed, it will be securely deleted or anonymized.

Security of Your Data

Protecting your data is a top priority. We put in place appropriate physical, technical, and managerial safeguards to prevent unauthorized access, loss, misuse, or disclosure of your personal information. For example, your payment details are transmitted securely and not stored on our servers.

Your Rights Under GDPR

As a customer within the Biggin Hill and surrounding districts, you have the following rights concerning your personal data:

• Right to Access: You can request a copy of your personal data that we hold.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data where there is no lawful reason to keep it.
• Right to Restrict Processing: You can request limitation of the use of your data in certain circumstances.
• Right to Data Portability: You may request your data in a portable format for you or another provider.
• Right to Object: You can object to our processing of your data based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact details provided on our website. We aim to respond to legitimate requests within one month.

Children's Privacy

Flower Delivery Biggin Hill does not knowingly collect or process personal data relating to children under 16 years of age. If you believe a child has provided us with personal data, please contact us, and we will promptly delete such information.

Changes to This Policy

We reserve the right to update this Privacy Policy in line with new legislation or changes to our practices. The latest version will always be available on our website, with the date of the most recent revision clearly indicated.

Contact Us

If you have any questions or concerns about this Privacy Policy or your data protection rights, please use the contact options set out on our website. We are always happy to assist and take your privacy seriously.