Privacy Policy for Customers of Flower Delivery Haringey

Introduction

This Privacy Policy describes how Flower Delivery Haringey (‘we’, ‘us’, ‘our’) collects, uses, stores, and protects personal data of customers placing orders within Haringey and surrounding districts. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Scope of This Policy

This Privacy Policy applies to all personal data collected from customers who place flower delivery orders with Flower Delivery Haringey, whether through our website, telephone, or in-person orders. The policy covers all individuals residing in or placing orders for delivery to Haringey and surrounding districts.

Data We Collect

We collect personal data necessary to process and fulfil your flower delivery order, provide customer service, and improve our services. Depending on your interactions with us, we may collect and process the following information:

• Identity Data: Name, surname, and, if applicable, your company name.
• Contact Data: Delivery address, billing address, email address, postal code, and telephone number.
• Order Data: Details of products you order, delivery instructions, messages for recipients, and special requests.
• Payment Data: Payment method (we do not store full card details—payments are processed securely by external providers).
• Technical Data: IP address, device type, browser type, and cookies if you use our website.
• Customer Service Data: Correspondence with our team, including queries, complaints, and feedback.

Lawful Basis for Processing

Our processing of your personal data is grounded on the following lawful bases as provided by the GDPR:

• Contractual Necessity: We process your personal data to fulfil our contract with you, such as delivering orders, sending order confirmations, and processing payments.
• Legal Obligation: We may process your data to comply with legal obligations, financial record-keeping, and regulatory requirements.
• Legitimate Interests: We use your data to improve our services, respond to your inquiries, and prevent fraud, unless your interests override ours.
• Consent: We may, on occasion and where required, request your consent for activities such as marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used to;

• Process and deliver your flower orders to the specified address.
• Communicate order status, updates, and resolve queries or concerns.
• Personalise the services we offer to improve your customer experience.
• Comply with applicable laws and regulations.
• Assess and enhance the quality of our products and services.

Who Processes Your Data

We may share your data with carefully selected third-party service providers (‘processors’) to facilitate some aspects of our services. Such processors may include:

• Payment Providers: To securely process order payments.
• Delivery Partners: For the fulfilment and delivery of flower orders.
• IT Support and Hosting Providers: For maintaining the security and operation of our digital systems.
• Accounting and Audit Partners: To discharge our legal accounting obligations.

Each processor is bound by GDPR-compliant contractual obligations regarding the security and appropriate use of your data. We do not permit third-party processors to use your personal data for their own purposes.

Data Retention

We retain your personal data only for as long as necessary to meet our contractual and legal obligations, resolve disputes, and enforce our agreements. Typically, we retain:

• Order and payment data for up to seven years to satisfy statutory tax and accounting requirements.
• Customer service data for up to two years to resolve queries or complaints efficiently.
• Technical and cookie data according to our cookie policy and browser settings.

After the retention period, your data is securely deleted or anonymized except where we are obliged to retain it longer by law.

Your Rights as a Data Subject

The GDPR grants you several key rights regarding your personal data. You have the right to:

• Access: Request copies of your personal data we hold.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Ask us to delete your data when no longer necessary for the original purposes.
• Restriction: Request that we limit the processing of your data.
• Objection: Object to certain processing based on legitimate interests or direct marketing.
• Portability: Request us to transfer your data to you or another provider in a machine-readable format where applicable.
• Withdraw Consent: Withdraw any consent for processing, at any time, when granted.
• Lodge a Complaint: File a complaint with the UK supervisory authority if you believe your privacy rights have been infringed.

Security of Your Data

We have implemented reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is restricted to employees, agents, contractors, and other third parties who need to access it for business purposes and are subject to strict confidentiality obligations.

International Transfers

We do not routinely transfer your data outside the United Kingdom or the European Economic Area (EEA). If we need to do so, for example where a processor is based outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms recognised by the GDPR.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our data processing practices or for other operational, legal, or regulatory reasons. We encourage you to review the policy regularly to stay informed on how we protect your information.

How to Exercise Your Rights or Contact Us

If you wish to exercise any of your rights regarding your personal data or have any enquiries or complaints about this Privacy Policy, please contact us by using the contact form or the contact details on our website. We will respond to your requests in accordance with applicable data protection laws.

Conclusion

Your trust is important to us. Flower Delivery Haringey is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy ensures that you remain informed and in control of your personal data when you order from us in Haringey and the surrounding districts.