Flower Delivery Wennington Privacy Policy

Introduction

At Flower Delivery Wennington, we respect and value your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you place an order with us in Wennington and surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This Policy applies to all customers who use our flower delivery services in our operational area.

What Personal Data We Collect

When you place an order with Flower Delivery Wennington, we may collect and process the following types of personal data:

  • Identity Data: Name, surname, and any other identifying information you provide.
  • Contact Data: Billing address, delivery address, telephone numbers, and any other contact details submitted to us by you.
  • Order Data: Details of your order, including delivery instructions, messages for recipients, and preferences.
  • Payment Data: Partial card information and transaction references (note: card details are typically processed via secure third-party payment processors and are not accessible by us).
  • Technical Data: IP address, browser type and version, time zone setting, device information, and use of our website (cookies, browsing activity, etc.) where applicable.
  • Correspondence: Records of your communications with us, including queries, feedback, and complaints.

We endeavour to collect only the minimum necessary data required to fulfil your order and provide a smooth customer experience.

The Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to process your personal data. Flower Delivery Wennington relies on the following lawful bases:

  • Contract: Processing is necessary to perform our contract with you (e.g., to deliver your flower order and communicate order updates).
  • Legal Obligation: We may need to process your data to comply with legal and regulatory requirements, such as complying with tax or anti-fraud laws.
  • Legitimate Interests: We may process your data to improve our services, maintain security, and protect our business, given these interests do not override your fundamental rights and freedoms.
  • Consent: Where applicable, such as for marketing communications, we will request your explicit consent and give you the option to withdraw consent at any time.

How We Use Your Personal Data

We use your personal data strictly for legitimate business purposes, including:

  • Processing and fulfilling your orders, including arranging deliveries in Wennington and nearby areas.
  • Sending you updates and information related to your order.
  • Responding to your queries, requests, or feedback.
  • Improving our website, products, and customer experience.
  • Managing accounts and maintaining proper administrative records.
  • Complying with applicable law, regulations, and internal policies.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes it was collected for, including satisfying legal, accounting, or reporting requirements. The retention period may vary depending on the type of data and the context of processing. Typically, order and transaction data is kept for up to six years to meet tax and legal obligations. After this period, or upon your request (where applicable), data will be securely deleted or anonymised.

Sharing and Disclosing Your Data

We may share your personal data with selected trusted third parties, also known as data processors, including:

  • Payment Processors: For secure handling of payments (we do not retain full card details).
  • Delivery Partners: To facilitate order fulfilment and delivery.
  • IT and Hosting Providers: To support our website and business systems.
  • Professional Advisers: Such as accountants, legal advisers, or insurers, in fulfilling our legal obligations.

We always ensure that our processors adhere to strict data protection standards and process data solely on our behalf and as instructed. We do not sell or rent your personal data to third parties. Unless required by law, we will not disclose your information to law enforcement or government agencies without your explicit consent.

Your Rights Under the GDPR

As a data subject, you have the following rights with regard to your personal data:

  • Right to Access: You can request a copy of your personal data held by us.
  • Right to Rectification: You can request correction of any incomplete or inaccurate data we hold about you.
  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data in certain circumstances.
  • Right to Restrict Processing: You may request us to limit the processing of your data in specific cases.
  • Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: You may object to processing where we rely on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

If you wish to exercise any of these rights, please contact us using the contact details provided on our website or speak with our customer service team. We may need to verify your identity before responding to your request and will respond within the timeframe permitted by law.

International Data Transfers

We store personal data locally within the UK or EEA wherever possible. If we engage service providers outside of these jurisdictions, we ensure your data is protected by appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or other required mechanisms under the GDPR.

Data Security

We take the security of your personal data seriously. Appropriate technical and organisational measures are in place to prevent unauthorised access, loss, or misuse of personal data. This includes the use of encrypted systems, secure payment gateways, staff training, and data minimisation practices.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. Please review this policy regularly to stay informed about how we protect your personal data.

Contact and Complaints

If you have questions, concerns, or complaints about how your personal data is handled by Flower Delivery Wennington, please contact our customer service team using the details on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office or your local data supervisory authority if you believe we have not processed your data in accordance with the law.