How We Handle Your Data at Flower Delivery Redhill
Introduction
At Flower Delivery Redhill, your privacy and data protection are our top priorities. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Flower Delivery Redhill from Redhill and the surrounding districts.
What Personal Data We Collect
In fulfilling your flower delivery orders and providing you with quality customer service, we may collect and process the following categories of personal data:
- Contact Information: such as your name, postal address, delivery address, and contact details.
- Order Details: including recipient name and address, preferred delivery time, order preferences, and message card text.
- Payment Information: such as details required for processing your payment (handled securely via our payment processors).
- Account Information: if you register for an account, including username and password (encrypted).
- Correspondence: such as your communications with our customer support and feedback provided on your orders.
- Technical Data: like IP address, browser type, device information, operating system, and website usage data (through cookies and analytics tools).
Lawful Basis for Processing Your Data
Under GDPR, we only process your personal data when there is a legal basis for doing so. The lawful bases for our data processing are:
- Performance of a Contract: To fulfil your orders, process payments, and deliver flowers as requested.
- Legal Obligations: To comply with applicable laws, tax, and accounting requirements.
- Legitimate Interests: To manage and improve our services, handle customer queries, and prevent fraud (provided that your interests or fundamental rights do not override these interests).
- Consent: For certain optional activities, such as sending marketing communications, when you have expressly agreed to receive them. You may withdraw consent at any time.
How We Use Your Personal Data
Your personal information may be used for the following purposes:
- Processing and delivering your flower orders accurately and promptly.
- Managing your account and order history (if registered).
- Responding to your queries, feedback, or complaints.
- Communicating with you about your orders and related customer service matters.
- Improving our website, products, and services through analytics and customer feedback.
- Fulfilling legal and regulatory obligations.
- Sending you direct marketing communications (if you have provided consent).
How We Share and Disclose Personal Data
We value your trust and do not sell your personal data to third parties. However, to fulfil your order and run our business efficiently, we may share elements of your data with trusted third-party processors strictly as necessary:
- Payment Service Providers: To process your payment securely and prevent fraud. Payment details are encrypted and not retained after the transaction unless you request us to do so for recurring payments.
- IT and Delivery Partners: Companies that support our website hosting, customer support, flower dispatch, and delivery operations.
- Professional Advisors: Legal, tax, or accounting professionals when required to comply with obligations.
- Regulatory or Law Enforcement: Where we are mandated by law or regulation to disclose certain data.
All third-party processors are subject to data processing agreements or equivalent arrangements that require them to handle your data in accordance with applicable data protection laws.
Data Storage and Retention
We store your personal data securely and only for as long as is necessary for the specified purposes:
- Order records are retained for up to seven years, in line with tax and contractual obligations.
- Customer support and correspondence are retained as long as required to resolve the enquiry or for a maximum of two years.
- Account details are kept until you delete your account or request removal.
- Marketing consents are retained while you remain opted in, with periodic reviews to confirm your preferences.
Once retention periods lapse, or if you request erasure, your data will be securely deleted or anonymised.
Your Rights Under GDPR
You have a number of rights under the General Data Protection Regulation regarding your personal information. These include:
- Right to Access: You may request confirmation of what personal data we hold about you and obtain a copy.
- Right to Rectification: If your data is inaccurate or incomplete, you may request corrections.
- Right to Erasure: In certain cases, you may request that we delete your personal data.
- Right to Restrict Processing: You may ask us to limit the processing of your data in certain circumstances.
- Right to Object: You can object to your data being processed for direct marketing or based on legitimate interests.
- Right to Data Portability: You may request the transfer of your data to another service provider.
- Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: You have the right to contact the relevant supervisory authority if you believe your data has not been handled lawfully.
Security of Your Data
We employ robust security measures to protect your data against loss, theft, unauthorised access, disclosure, or alteration. These include encryption, secure servers, regular security reviews, and staff training in data protection. While we strive to safeguard your information, the transmission of data over the internet is not completely secure. We advise you to take appropriate measures when entering data online.
Cookies and Analytics
Our website uses cookies and similar technologies to personalise your experience, to analyse website usage, and to support our security measures. Where required, we will seek your consent for placing cookies and explain their purpose. You can manage your cookie preferences through your browser settings.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The latest version will always be available on our website. Material changes will be notified to you as required by law.
Contact and Further Information
If you have any questions about this Privacy Policy or your data protection rights, please contact our customer service or Data Protection Officer through our website contact form. We are committed to resolving any concerns promptly and transparently.
This policy is effective as of 01 June 2024 and applies to all Flower Delivery Redhill customers in Redhill and surrounding districts who place orders with us.