Privacy Policy for Flower Delivery Cubitt Town Customers
Introduction
This Privacy Policy outlines how Flower Delivery Cubitt Town collects, uses, protects, and manages the personal data of customers placing orders in Cubitt Town and the surrounding districts. We are committed to ensuring that your privacy is protected and that we comply fully with the UK General Data Protection Regulation (GDPR).
Scope of This Policy
This policy applies to all individuals who purchase or arrange flower deliveries via Flower Delivery Cubitt Town, either for themselves or on behalf of another recipient, within Cubitt Town and its neighbouring areas. By placing an order with us, you agree to the terms described in this Privacy Policy.
What Data We Collect
We collect and process personal data necessary for fulfilling your flower orders and delivering excellent customer service. The information we collect includes:
- Contact Information: Name, delivery address, billing address, email address, and telephone number.
- Order Details: Products ordered, delivery preferences, messages to recipients, and order history.
- Payment Information: Payment card details or other payment method details, processed securely by authorised payment processors (we do not store your full payment card details).
- Communication Records: Correspondence with our customer service team relating to orders, enquiries, or feedback.
- Technical Data: IP address, device information, and usage data generated when visiting or using our website, collected via cookies or other tracking technologies.
Lawful Basis for Processing Your Data
We process your personal data under the following lawful bases, as permitted by the GDPR:
- Contractual Necessity: To process and deliver your order, provide customer support, and personalise your experience. Without this information, we are unable to fulfil your order.
- Legal Obligation: To comply with legal, accounting, and tax requirements.
- Legitimate Interests: To improve our products and services, communicate relevant offers (if applicable), and enhance the security of our operations. We carefully assess our legitimate business interests and your rights before processing data on this basis.
- Consent: Where required by law, for example for marketing communications, we will seek your explicit consent. You may withdraw your consent at any time.
How We Use Your Information
Your personal data is used for the following purposes:
- To manage and fulfil flower orders.
- To deliver products to the specified recipient.
- To communicate with you regarding your order, such as updates or delivery confirmations.
- To respond to your requests, enquiries, or feedback.
- To process secure payments through authorised payment service providers.
- To comply with applicable laws and regulations.
- To analyse usage patterns and improve our services and website functionality.
- To send relevant marketing communications, where you have opted in to receive them.
Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, including to comply with legal, regulatory, or accounting requirements. Specifically:
- Order and customer data: Retained for up to six years from your last interaction for accounting and warranty purposes, unless you request erasure sooner and we have no overriding legal obligations to retain.
- Marketing preferences: Maintained until you unsubscribe or withdraw consent.
- Technical data (cookies): Retention periods vary according to cookie type and purpose, as explained in our Cookie Policy.
Our Data Processors
We share your information with trusted third-party service providers (data processors) who assist us in delivering our products and running our business. These include:
- Payment processors for handling secure transactions (we do not store payment card numbers).
- IT service providers for website hosting, support, and maintenance.
- Logistics providers for arranging deliveries within Cubitt Town and surrounding districts.
- Analytics providers to help us understand user activity and improve our services.
All processors are contractually obligated to safeguard your data, use it only for the designated purposes, and comply with GDPR requirements. We do not sell or share your personal information with third parties for their own marketing purposes.
International Transfers
Wherever possible, we store and process your data within the United Kingdom or European Economic Area (EEA). If it becomes necessary to transfer your data outside these jurisdictions, we ensure that appropriate safeguards and legal mechanisms are in place, in accordance with GDPR, to protect your privacy.
Your Data Protection Rights
Under the GDPR, you have specific rights regarding the personal data that we hold about you:
- Right to Access: You can request a copy of your personal data held by us.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure: You have the right to request deletion of your data, subject to our legal obligations.
- Right to Restrict Processing: You can request restriction of how we process your data in certain circumstances.
- Right to Data Portability: You may request your data in a machine-readable format or that it be transferred to another controller.
- Right to Object: You may object to our processing of your data based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Where your data is processed based on your consent, you can withdraw this at any time.
To exercise your rights, please get in touch with us using the contact details provided on our website. We aim to respond to all legitimate requests within one month.
Security Measures
Your privacy is important to us. We have implemented physical, technical, and administrative security measures to protect your personal data against loss, unauthorised access, alteration, or disclosure. Only authorised staff and service providers have access to personal information where necessary for the purposes described above.
Changes to This Policy
We may periodically update this Privacy Policy to reflect changes in our processes or in legal requirements. Updated versions will be made available on our website, and we recommend reviewing this policy from time to time to stay informed.
Contact and Complaints
If you have any questions regarding your personal data or this Privacy Policy, please use the contact information provided on our website. If you feel that your rights under GDPR have not been respected, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).