Flower Delivery Perivale Privacy Policy

Privacy Commitment to Our Customers

At Flower Delivery Perivale, we are committed to respecting and protecting the privacy of everyone who places an order with us, whether you are based in Perivale or the surrounding districts. This Privacy Policy outlines our practices regarding personal data collection, lawful processing, data retention, engagement with data processors, and your rights under the UK General Data Protection Regulation (GDPR).

Scope of this Policy

This Privacy Policy applies to all customers who place Flower Delivery Perivale orders for delivery within Perivale and neighbouring districts. By placing an order with us, you acknowledge the terms set out in this privacy policy regarding your personal information.

What Data We Collect

To provide our flower delivery services efficiently and securely, we may collect and process the following categories of personal data:

• Identification Data: Name, title, and, where applicable, company name.
• Contact Details: Delivery and billing address, postal code, phone number, and, where required, any notes or instructions for delivery.
• Order Information: Details about your orders, including specific items purchased, delivery preferences, and gift messages.
• Payment Data: Payment method, transaction reference, and payment confirmation (we do not store your complete card details; these are securely processed by our payment processor).
• Communication Data: Correspondence with customer service, order confirmations, requests, and complaints.
• Marketing Preferences: Choices regarding receiving special offers, promotional communications, or newsletters (if you opt in).
• Technical Data: IP address, device type, browser type, and visit logs for security and website improvement purposes.

Lawful Basis for Processing Your Personal Data

We process your data only when permitted by law and for clear purposes. The lawful bases on which we rely include:

• Contractual Necessity: To process your order, deliver flowers, communicate delivery updates, and manage payments.
• Legal Obligation: To comply with laws relating to financial record-keeping, tax, and regulatory reporting.
• Legitimate Interests: To improve our services, prevent fraud, manage customer service queries, and ensure the security of our website.
• Consent: For direct marketing or where we request your permission for processing not covered above. Where consent is given, you may withdraw it at any time.

How We Use Your Data

Your personal data is used solely for the purposes outlined below and not for unrelated activities:

• Fulfilling and delivering your flower orders.
• Verifying transactions and managing payments.
• Communicating with you about your order or service issues.
• Sending you service-related announcements.
• Managing your preferences, such as marketing choices (if opted in).
• Improving our website and customer experience through analytics (using anonymised or pseudonymised data).
• Maintaining legal and financial records as required by law.

Sharing Your Data: Our Processors

To provide our services efficiently, we may need to share certain personal data with trusted third-party processors and suppliers. These may include:

• Payment Processors: Secure handling of credit/debit card and online transactions.
• IT & Web Service Providers: Secure site hosting, email, and data storage on our behalf.
• Delivery Partners: Couriers and logistics partners who deliver your orders.

All third-party processors are engaged under contracts which require them to comply with the obligations of data protection legislation and only process your data for the specified purposes. We do not sell or rent personal data to any third parties.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, this means we keep order and transaction records for up to 7 years after your most recent order to comply with legal and financial regulations. Communication and marketing preferences are stored for as long as you remain an active customer or until you withdraw consent.

Upon expiry of the retention period, your data will be securely deleted or anonymised, unless continued retention is legally required or justified by contractual necessity.

Your GDPR Data Protection Rights

Under GDPR, you have specific rights regarding your personal data. Flower Delivery Perivale is committed to facilitating exercise of these rights, which include:

• Right to Access: Request a copy of your personal data held by us.
• Right to Rectification: Ask us to correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data, where legally permissible.
• Right to Restrict Processing: Ask us to restrict or suspend processing of your data in certain circumstances.
• Right to Data Portability: Obtain your data in a structured format for transfer to another provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we process data on the basis of your consent, you may withdraw this at any time without affecting prior lawful processing.

To exercise any of these rights, please contact our Data Protection team as indicated in our customer area. We aim to respond to all legitimate requests within one month.

Security Measures

We employ robust technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. This includes secure encryption of payment information, access controls, secure storage, and staff training in data protection best practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our service activities. The latest version will always be available on our website. We will notify customers where significant changes are made.

Contact Us

If you have any questions about this Privacy Policy, want more information about our data processing practices, or wish to exercise your GDPR rights, please refer to the customer service details provided within our website or your order confirmation documentation. We are committed to resolving any privacy concerns promptly and transparently.