Flower Delivery Hornsey Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Hornsey collects, uses, stores, and protects your personal data when you place an order with us as a customer in Hornsey and the surrounding districts. We are committed to ensuring your personal information is handled in accordance with the UK General Data Protection Regulation (GDPR), and this policy explains your rights in connection with your data.

Scope of This Policy

This policy applies to all individuals who place flower delivery orders with Flower Delivery Hornsey, whether online, by telephone, or in person. It covers data collected during the process of placing and fulfilling your orders, as well as any related customer service interactions.

What Data We Collect

To provide our services, we may collect, use, store, and transfer different types of personal data about you, including:

• Identity Data: Full name, delivery recipient’s name.
• Contact Data: Billing and delivery addresses, telephone numbers.
• Order Data: Details of products ordered, messages for delivery, purchase history.
• Payment Data: Payment method details (processed securely by third-party payment processors; we do not store full card details).
• Technical Data: IP address, device information, and browsing activity if you use our website.
• Correspondence Data: Details of your communications with us, including complaints, queries, or feedback.

How We Collect Your Data

We collect data from you when you place an order (online, by phone or in person), contact us for support, leave feedback, or interact with our digital channels. Some technical and usage data may be collected automatically when you visit our website.

Lawful Basis for Processing

Under the GDPR, we must have a valid lawful basis to process your personal data. Your data may be processed based on the following lawful grounds:

• Contractual Necessity: Processing your order and providing customer service.
• Legal Obligations: To comply with regulatory and tax obligations.
• Legitimate Interests: To manage our business operations, improve our services, prevent fraud, and respond to your queries. We always balance these interests against your rights and freedoms.
• Consent: We may ask for your consent to send marketing communications. You always have the right to withdraw consent at any time.

How We Use Your Data

Your personal data is used to:

• Process and deliver your order accurately and promptly.
• Communicate with you regarding your order and any queries.
• Fulfil our legal, accounting, and regulatory duties.
• Improve our products and services based on customer feedback.
• Send service updates or, if you have opted in, marketing information.

Who Processes Your Data

Flower Delivery Hornsey may share your data with trusted third-party service providers in order to fulfil our services. Such processors may include:

• Delivery partners for making timely deliveries.
• Payment processors to securely handle card transactions.
• IT and system service providers that support our operations.
• Professional advisors (such as accountants or legal counsel, where this is required for compliance).

All such processors are contractually required to handle your data with the same level of security and are only permitted to use your personal information for the purposes specified by us.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods depend on the nature of the information and our regulatory obligations, typically no longer than six years after your last interaction with us, unless a longer retention is required by law.

After the relevant retention period ends, we securely delete or anonymise your personal data.

Data Security

We use appropriate technological and organisational security measures to protect your data against accidental loss, unauthorised access, or unlawful processing. This includes secure storage, encrypted payment processing, and limiting access to your personal information only to those employees, agents, contractors, and processors who have a business need to know.

International Data Transfers

We primarily store your personal data within the United Kingdom or the European Economic Area (‘EEA’). If your data must be transferred outside the UK or EEA, we ensure it is protected by appropriate safeguards as required by the GDPR.

Your Data Rights

Under GDPR, you have several rights in relation to your personal data:

• Access: Request a copy of your personal data we hold about you.
• Rectification: Request correction of any incorrect or incomplete data.
• Erasure: Request deletion of your data in certain circumstances (‘right to be forgotten’).
• Restriction: Ask us to restrict processing under certain conditions.
• Data Portability: Request transfer of your data to you or to a third party.
• Objection: Object to certain processing, such as direct marketing.
• Withdraw Consent: If we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the contact details provided on our website or your usual communication channel.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or for other operational reasons. Any changes will be made available in the most recent version, and we encourage you to review this policy periodically.

Contact and Complaints

If you have questions about this Privacy Policy, your personal information, or want to make a complaint, please get in touch via the correspondence options on our website. If you remain dissatisfied with our response, you also have the right to lodge a complaint with the relevant supervisory authority in the UK.

This Privacy Policy was last updated in 2024.