Personal Data Protection and Privacy - Flower Delivery New Malden

Privacy Policy for Flower Delivery New Malden Orders

Introduction

This Privacy Policy explains how Flower Delivery New Malden (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you place flower delivery orders in New Malden and the surrounding districts. We are committed to safeguarding your privacy and ensuring your personal data is managed in compliance with the UK General Data Protection Regulation (GDPR).

Scope of This Policy

This policy applies to all customers placing orders with Flower Delivery New Malden, whether online, by phone, or in person, including individuals in New Malden and neighboring areas. By using our services, you agree to the collection and use of your personal data in accordance with this policy.

What Data We Collect

We collect a range of personal data necessary to fulfill your flower delivery order and to enhance your experience. This may include:

Identity Data: Full name, title
Contact Data: Delivery address, billing address, phone number
Order Data: Details of products ordered, special instructions, recipient’s name and address
Payment Data: Card payment details (processed via secure payment processors; we do not store full payment card information)
Correspondence: Records of emails, messages, order notes, and feedback
Technical Data: IP address, device type, browser type, and usage data when you use our website

Lawful Basis for Processing Personal Data

We process your personal data based on the following lawful grounds:

Contractual Necessity: Processing is necessary to fulfill your flower delivery order, supply products, and deliver services you have requested.
Legal Obligation: We may process data to comply with applicable laws, tax, or accounting requirements.
Legitimate Interests: We may use your data to improve our services, prevent fraud, ensure security, and manage business operations, provided these interests do not override your rights and freedoms.
Consent: Where required (such as for marketing communications), we will only process your data based on your explicit consent, which you may withdraw at any time.

How We Use Your Personal Data

Your personal data is used for the following purposes:

Processing and fulfilling your orders, including delivery and customer support
Communicating with you about your orders and responding to enquiries
Processing payments securely and managing billing
Improving our products and services
Complying with legal and regulatory obligations
Subject to consent, sending you updates, offers, and marketing materials related to Flower Delivery New Malden

Retention of Your Data

Your personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Generally, we will retain order and transaction data for up to seven years, in line with UK tax and accounting rules. Contact and correspondence data is kept for up to two years following the resolution of your enquiry or complaint unless a longer retention period is required or permitted by law.

Data Processors and Sharing

To provide our services, we may share your data with trusted third-party processors who assist us in specific functions, including:

Payment processors: To securely handle transactions. Your payment details are transmitted directly to these providers and not stored by us.
Delivery partners: For fulfillment and local delivery in New Malden and surrounding districts.
Technical service providers: To maintain our website, manage hosting, and ensure cybersecurity.
Professional advisors: Including lawyers, accountants, and auditors for regulatory compliance.

All third-party service providers are required to respect the confidentiality and security of your personal data and to process it only as directed by us and in full compliance with the GDPR.

International Data Transfers

Your personal data is processed primarily within the UK and European Economic Area (EEA). If, in exceptional circumstances, data must be transferred outside the UK/EEA, we ensure adequate safeguards are in place to protect your data.

Security of Your Data

We use appropriate technical and organisational measures to protect the security of your personal information from loss, misuse, or unauthorised access. These measures are regularly reviewed and updated in line with technological advancement and regulatory requirements.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access: Request access to your personal data held by us.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request erasure of your data where there is no lawful reason for its retention.
Right to Restriction: Request restriction of processing of your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
Right to Object: Object to processing for direct marketing or where processing is based on legitimate interests.
Right to Withdraw Consent: Withdraw consent where processing is based on consent, at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been processed unlawfully.

Children’s Privacy

We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in the law or in our data processing practices. We encourage you to review this policy periodically for any updates or changes. Continued use of our services following any changes constitutes acceptance of those changes.

Contact and Further Information

If you have any questions regarding this Privacy Policy or your personal data, please contact us through the usual customer service channels. We are happy to assist you in exercising your rights or addressing any concerns you may have regarding your privacy and data protection.