Flower Delivery Mottingham GDPR Privacy Policy
Privacy Policy for Flower Delivery Mottingham Orders
This Privacy Policy explains how Flower Delivery Mottingham ("we", "us", or "our") collects, uses, stores, and protects your personal data when you place orders with us in Mottingham and neighbouring districts. We are committed to respecting your privacy and safeguarding your personal information, in line with the UK General Data Protection Regulation (GDPR).
Scope of this Policy
This Privacy Policy applies to all customers who place flower delivery orders with Flower Delivery Mottingham, whether directly through our website, over the phone, or in person, including orders from Mottingham and the surrounding areas. By placing an order with us, you agree to the terms of this policy.
Personal Data We Collect
We collect the following categories of personal data in order to fulfill your flower delivery orders:
- Contact Information: Name, billing and delivery addresses, and telephone numbers.
- Order Details: Details of the products and services you purchase, and personalized messages for gift deliveries.
- Payment Information: Transaction details (note: payment card details may be processed by our payment processor and are not stored by us).
- Communication Data: Correspondence via email, contact forms, or telephone calls, including queries, complaints, or service requests.
- Technical Data: IP address, browser type, or device information collected automatically when you interact with our website (for website analytics and security).
Lawful Bases for Processing
Under GDPR, we must have a lawful basis to collect and process your data. The data we collect is processed on the following lawful bases:
- Performance of a Contract: We require your personal information to process, fulfill, and deliver your flower orders as requested.
- Legal Obligations: We may retain certain transactional details for financial or tax-related obligations as required by law.
- Legitimate Interests: To improve our services, respond to enquiries, or handle complaints, provided such interests are not overridden by your rights and freedoms.
- Consent: If we use your information for marketing purposes, this will only be done with your explicit consent, which can be withdrawn at any time.
Use of Your Personal Data
Your data is used for purposes that include:
- Processing and confirming your flower delivery orders
- Arranging and completing delivery to the chosen recipient
- Handling your enquiries, feedback, and support requests
- Complying with legal and regulatory requirements
- Improving our services and website experience (using aggregated and anonymized information where possible)
- Sending you marketing communications (if you have opted in)
Retention Periods
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting obligations. Our typical retention periods are:
- Order and Contact Information: Retained for up to 6 years from the date of your last order, to comply with tax and contractual obligations.
- Marketing Records: Retained until you unsubscribe or withdraw your consent.
- Technical Data: Retained for analytical purposes for no longer than 26 months.
We securely erase or anonymize your data once it is no longer needed.
Data Processors and Third Parties
To deliver our services, your information may be shared with:
- Payment processing providers, for secure transaction handling
- IT and hosting service companies that support our website and data infrastructure
- Delivery partners responsible for fulfilling your flower orders
- Professional advisors (such as accountants, where legally required)
Each processor is carefully selected to ensure they adhere to GDPR requirements and only process your data under our instructions. We do not sell or rent personal data to third parties for marketing purposes.
International Data Transfers
In rare circumstances, your data may be transferred outside the United Kingdom or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as contractual clauses prescribed by GDPR, to protect your personal data.
Security Measures
We take security seriously and have implemented appropriate technical and organizational measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. Our payment processing partners are PCI DSS compliant.
Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: Obtain confirmation of whether we process your personal data and request a copy.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Ask us to delete your data where there is no lawful basis for continued processing.
- Right to Restrict Processing: Request a restriction on processing if you contest its accuracy or processing is unlawful.
- Right to Data Portability: Receive your data in a structured, commonly-used format for transfer to another provider.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.
If you wish to exercise your rights, please contact us through our contact page or by writing to our business address. We may request proof of identity for security purposes.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We encourage you to review this policy periodically. The latest version will always be available upon request or via our website.
How to Raise a Concern or Make a Complaint
If you have any concerns about how we use your personal data, you can contact us in writing. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with data protection laws.
Thank you for trusting Flower Delivery Mottingham with your order and your data privacy.
