Privacy Policy for Flower Delivery Beaconsfield Customers

Introduction

This Privacy Policy explains how Flower Delivery Beaconsfield ('we', 'our', or 'us') collects, uses, and protects your personal data when you place an order with us in Beaconsfield and the surrounding districts. We are committed to respecting your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

Scope of this Policy

This policy applies to all customers placing orders with Flower Delivery Beaconsfield for flower deliveries and related services in Beaconsfield and the nearby areas. By placing an order with us, you agree to the terms outlined in this Privacy Policy. We encourage you to read this document in full to understand how your personal data is handled and your rights regarding that data.

What Personal Data We Collect

In order to process orders and provide our services, we may collect the following types of personal data:

• Identity Data: Name, title.
• Contact Data: Delivery address, billing address, phone number (if provided), and other delivery instructions.
• Order Data: Order details, special instructions, order history, and payment confirmations (note: we do not retain full card details).
• Recipient Data: Name, address, and any personal message requested for delivery to a third party.
• Marketing Data: Preferences for receiving marketing communications (if you opt-in).
• Technical Data: IP address, browser type and version, device type, and information regarding your visits to our website (if you use our online ordering system).

Lawful Basis for Processing Your Data

Under the GDPR, we are required to identify our legal grounds for processing personal data. Our use of your personal information relies on the following lawful bases:

• Contractual necessity: In order to fulfil our contract with you when you place an order, such as processing payments and delivering flowers.
• Legitimate interests: To manage our business operations, improve our services, address customer enquiries, and keep records of transactions (excluding activities where your interests override ours).
• Legal obligation: To comply with our tax, accounting, and other mandatory obligations.
• Consent: For sending marketing communications, if you have given your explicit permission. You can withdraw this consent at any time.

How We Use Your Personal Data

Your information is used for the following purposes:

• To process and fulfil your orders, including delivery to yourself or a nominated recipient.
• To respond to your communications or enquiries.
• To improve and monitor the quality of our products and services.
• To issue invoices, receipts, or confirmations.
• To manage our legal and regulatory compliance.
• To provide marketing (if you have opted in).

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required to meet legal, accounting, or reporting obligations. Our general principles are as follows:

• Order and transaction data: Retained for up to 7 years to comply with financial and accounting regulations.
• Marketing preferences: Kept until you unsubscribe or withdraw your consent.
• Website usage data: Retained for up to 2 years for analytical and security purposes.
• Recipient details: Typically held only for as long as needed to complete the delivery.

After these retention periods, personal data is securely deleted or anonymised.

Data Security

We implement appropriate organisational and technical measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Access to your data is limited to those employees, agents, and subcontractors who need such access to provide our services and are subject to strict confidentiality obligations.

Third Party Processors

To provide a seamless service, we sometimes share personal data with trusted third-party processors. These parties are only permitted to use your information as necessary to perform their services. Our main categories of processors include:

• Payment service providers: To process your payments securely, we engage reputable payment processors. We do not store your full card numbers or sensitive payment data.
• Delivery and logistics partners: When required, partners may assist with deliveries in outlying districts.
• Website and IT service providers: For hosting, order processing, and technical support for our systems.
• Legal and professional advisors: When required for compliance, dispute resolution, or legal matters.

We require all our third-party processors to respect the security of your data and to treat it in accordance with the law.

Your Rights under GDPR

As a customer, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Ask us to delete your personal data where there is no good reason for us to continue processing it.
• Restriction: Request restriction of processing certain data.
• Objection: Object to processing based on legitimate interests or to direct marketing.
• Portability: Request transfer of your data to another provider, where technically feasible and applicable.
• Withdraw consent: Where our processing is based on your consent (for example, marketing), you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the details provided on our website or in your order confirmation. Depending on the nature of your request, we may need to verify your identity before responding.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The latest version will always be published on our website and is applicable from the date stated at the top of the policy. Please review the policy periodically.

Contact and Complaints

If you have questions about this Privacy Policy or wish to make a complaint regarding your data rights, please refer to our contact details available on our website. If you are not satisfied, you have the right to lodge a complaint with the relevant data protection authority.