Privacy Policy for Flower Delivery Hendon Customers

Introduction

This Privacy Policy explains how Flower Delivery Hendon understands and respects your personal data when you place an order with us. The policy applies to all customers ordering flower deliveries in Hendon and nearby districts. We are committed to protecting your privacy, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), and to being transparent about how and why we process your personal information.

What Information We Collect

To process and deliver your flower order efficiently, Flower Delivery Hendon may collect and process the following data:

• Identity Data: Name and title of the customer and recipient
• Contact Data: Delivery address, billing address, phone number (for delivery updates), and a card message (optional)
• Transaction Data: Order details, purchase history, delivery instructions, and payment method (note: we do not store full card details)
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform when using our website
• Usage Data: Information about how you interact with our website

We do not knowingly collect or process personal data from children under 16 years of age.

Purpose and Lawful Basis for Processing

Flower Delivery Hendon only collects and uses your data where legally permitted. The primary lawful bases for processing your personal information under GDPR include:

• Contractual necessity: Most data processing is required to fulfil our contract with you, such as processing your order and delivering flowers to the address you provide.
• Legitimate interests: We may process data to manage our relationship with you, to administer and protect our business and website, and to measure or understand customer interest.
• Legal obligations: Certain data retention or processing may be necessary to comply with financial, accounting, or tax obligations.
• Consent: In some situations, we may ask for your explicit consent, such as subscribing to marketing communications. You can withdraw such consent at any time.

How We Use Your Data

Your personal information is processed for the following purposes:

• To process, confirm, and deliver your flower order
• To contact you regarding your order or to respond to queries
• To manage any payments, refunds, or claims
• For fraud prevention and website security
• To improve our services, user experience, and website
• To comply with any legal or regulatory requirements

Where We Store and Process Your Data

Your data may be stored and processed in the United Kingdom. We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy. We use secure servers and encrypted payment gateways to safeguard your information.

Sharing and Data Processors

We may share your personal data with third-party service providers (Processors), but only when required to fulfil your order or for legitimate operational purposes. These include:

• Payment processors (for secure payment transactions)
• IT service providers and web hosting partners
• Delivery couriers to ensure your flowers reach the recipient promptly
• Professional advisers such as accountants or legal consultants (as required by law)

All third parties must respect the security of your personal data and treat it in accordance with the law. We do not permit our processors to use your data for their own purposes.

Retention of Your Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally:

• Order and transaction data are kept for up to seven years for accounting and tax purposes
• Correspondence and delivery instructions are kept for a maximum of two years
• Technical and usage data are kept for up to one year for analytics and website security

After the necessary period has passed, your data will be securely deleted or anonymised.

Your Rights Under GDPR

GDPR provides you with certain rights in relation to your personal data processed by Flower Delivery Hendon. These include:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can request correction of inaccurate or incomplete data.
• Erasure: You may request deletion of your personal data when there is no longer a valid reason for us to keep it.
• Restriction: You can ask us to temporarily suspend processing of your data in certain cases.
• Objection: You have the right to object to processing based on legitimate interests, or to direct marketing at any time.
• Portability: Where applicable, you may request that we transfer your data to you or another organisation.
• Withdraw Consent: Where we rely on consent, you may withdraw your consent at any time.

We aim to respond to all legitimate requests within one month. We may need to verify your identity before fulfilling your request.

Security of Your Data

We are committed to protecting your personal information. We employ a combination of technical, physical, and organisational controls, including the use of secure servers, data encryption, access controls, and staff training. However, while we take all reasonable measures to protect your information, no online service can guarantee absolute security.

International Transfers

We do not routinely transfer your personal data outside the United Kingdom. Should a transfer outside the UK be necessary, it will only occur where adequate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO) or the European Commission.

Changes to This Privacy Policy

Flower Delivery Hendon reserves the right to update this Privacy Policy when necessary to reflect changes in how we process your information or to meet legal and regulatory requirements. The latest version will always be made available upon request and will include an updated date of revision.

Contacting Flower Delivery Hendon

If you have questions about this policy, your data, or wish to exercise your rights under GDPR, please contact us using the contact information provided on our website. We will do our best to resolve any concerns to your satisfaction. If you are not satisfied with our response, you have the right to file a complaint with the Information Commissioner's Office (ICO).