Flower Delivery Slough GDPR Privacy Policy

Introduction

At Flower Delivery Slough, we are dedicated to protecting your privacy and managing your personal data in accordance with the General Data Protection Regulation (GDPR) and all applicable laws. This Privacy Policy explains how we collect, use, store, process, and protect your data when you place an order with Flower Delivery Slough. The policy applies to all customers ordering for delivery within Slough and surrounding districts.

What Data We Collect

To facilitate your flower delivery orders, we collect information necessary to process, fulfil, and communicate regarding your purchase. The types of data we may collect include:

• Personal Identification Information: such as your full name, delivery address, billing address, and contact details (such as phone number and, if submitted, email address).
• Order Details: including selected products, delivery preferences, instructions, and messages to recipients.
• Payment Information: processed securely through our payment processors. We do not store card numbers; we receive confirmation of payment status only.
• Communication Data: records of correspondence if you contact us regarding your order or services.
• Technical and Usage Data: including IP address, browser type, and access times, which may be collected for security and performance analysis of our website.

Lawful Basis for Processing Data

We process your personal data based on one or more of the following lawful grounds:

• Contractual Necessity: To fulfil the contract of service when you place an order with Flower Delivery Slough.
• Legal Obligation: To comply with our legal requirements, such as accounting, tax, or regulatory considerations.
• Legitimate Interest: Where it is necessary for our legitimate business interests provided these are not overridden by your interests or fundamental rights. For example, improving our services, managing our relationships with customers, and ensuring the security of our website.
• Consent: Where you have given explicit permission, such as for receiving marketing communications. Consent can be withdrawn at any time.

How We Use Your Data

Your information is used strictly for purposes including:

• Processing and fulfilling your flower delivery order.
• Communicating with you about your order status, deliveries, changes, or queries.
• Handling customer service enquiries.
• Meeting legal, taxation, and regulatory obligations.
• Improving website functionality and user experience.
• Sending marketing communications if you have opted in (which can be opted out at any time).

Data Retention

Your personal data will not be kept for longer than is necessary to fulfil the purposes for which it was collected or to comply with legal, accounting, or reporting requirements. Typically:

• Order-Related Data: Retained for up to seven years from date of transaction for legal and accounting compliance.
• Marketing Preferences: Kept until you unsubscribe or withdraw consent.
• Technical Data: Retained for a shorter period necessary for security analysis and site improvement.

Once retention periods expire, your data will be securely deleted or anonymised.

Data Processors and Third Parties

Flower Delivery Slough may share necessary personal data with trusted third-party service providers (“processors”) for the purpose of delivering services and running our business. These include:

• Payment Processors: To securely process payments for your orders.
• Delivery Partners: To carry out flower deliveries.
• IT Service Providers: To host and support our website and order management systems.
• Professional Advisors: Such as legal, tax, or accountancy consultants for compliance and business management.

Each processor is required to safeguard your data and may only use it to provide the required service to us. Data is not transferred outside the United Kingdom or European Economic Area unless adequate protection is ensured in line with GDPR.

Your Rights Under GDPR

As a customer of Flower Delivery Slough, you benefit from certain rights under the GDPR regarding your personal data. These include:

• Access: The right to obtain confirmation of whether we process your personal data and to access that information.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to have your personal data deleted where there is no good reason for us to continue to process it.
• Restriction: The right to request restriction of processing in specific circumstances.
• Objection: The right to object to processing for direct marketing and certain other purposes.
• Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
• Withdrawal of Consent: Where processing is based on your consent, the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us by the methods indicated on our website. We may need to verify your identity before acting upon your request. We aim to respond to all requests within one month.

Security of Your Data

We are strongly committed to maintaining the security of your personal data. Administrative, technical, and physical safeguards are employed to protect your information from unauthorized access, loss, misuse, or disclosure. Despite our best efforts, no system is completely foolproof; we encourage you also to take precautions when sharing your data online.

Children’s Privacy

Our flower delivery services are not intended for children under the age of 16, and we do not knowingly collect personal data from minors. If you become aware that a child under 16 has provided us with their information, please contact us so we can delete it.

Policy Updates

This Privacy Policy may be reviewed periodically to reflect changes in our practices, legal requirements, or service enhancements. The latest version will always be available on our website, and material changes will be notified to you.

Contact Information

If you have questions or concerns about your privacy or this policy, please refer to the contact options on our website. We also encourage you to reach out should you wish to exercise your GDPR rights or seek further clarification about our data protection practices.