Privacy Policy for Flower Delivery Hatton

Introduction

This Privacy Policy describes how Flower Delivery Hatton collects, uses, shares, and protects your personal data when you place orders with us from Hatton and its surrounding districts. As a service provider operating within the UK, we are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR) and all relevant data protection laws.

Scope of Policy

This policy applies to all customers who place orders with Flower Delivery Hatton, either directly through our website or via telephone, covering Hatton and the nearby districts. It details our practices regarding your personal information and your associated rights.

Personal Data We Collect

We collect and process personal data relevant to the services we provide. The types of personal data we may collect include:

• Identification Data: Full name, contact telephone number, and email address.
• Delivery Information: Recipient's name, address, and any delivery instructions.
• Order Details: Purchase history, product selection, preferences, and any notes you provide.
• Payment Data: Partial payment information required for processing transactions (note: all card payments are processed through a third-party payment processor and we do not store full card details).
• Communication: Records of your communication with us, including queries, complaints, and customer feedback.

Lawful Bases for Processing

We process your personal data on the following lawful grounds as defined by the GDPR:

• Contractual Necessity: To fulfil our contract with you when you place an order, by processing payments and delivering products.
• Consent: Where you provide explicit consent, such as for marketing emails or special offers. You may withdraw consent at any time.
• Legal Obligation: To comply with legal and regulatory requirements, such as record-keeping for tax purposes.
• Legitimate Interests: To improve our services, ensure network security, and manage customer relationships, provided that such interests are not overridden by your rights and interests.

How We Use Your Personal Data

Your data is used for the following purposes:

• Processing and delivering your order accurately and efficiently.
• Communicating order updates, confirmations, and delivery notifications.
• Managing payment and preventing fraudulent transactions.
• Addressing customer service enquiries and resolving complaints.
• Personalizing your experience and improving our offerings based on feedback and purchase history.
• Sending, with your explicit consent, marketing communications regarding new products or special offers.
• Complying with legal, taxation, or regulatory obligations.

Data Processors and Sharing of Information

To offer a seamless service, we use carefully selected third-party processors that assist us with payment processing, IT infrastructure, order delivery, marketing, and customer support. We only share necessary data with these processors and require all providers to comply with GDPR standards, ensuring your data is processed securely and lawfully.

Except for these service providers or where required by law, we do not disclose your personal information to third parties without your consent. Your data is never sold to any other organization.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, including satisfying any legal, accounting, or reporting obligations. Specifically:

• Order details and associated data: retained for up to six years as required by HMRC and tax authorities.
• Marketing consent data: retained until you withdraw your consent or request data deletion.
• Customer communications: retained for up to 24 months for quality assurance and dispute resolution purposes.

After the relevant retention period expires, your data is securely deleted or anonymised.

Security of Your Data

We implement appropriate technical and organisational measures to safeguard your personal data against accidental loss, destruction, damage, or unauthorized disclosure. These measures include access controls, staff training, secure storage, and regular monitoring of our systems and practices.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data we hold about you.
• Right to Erasure: You may request the deletion of your personal data when it is no longer necessary for the purposes collected or if you withdraw consent.
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format or that we transfer your data to another provider where technically feasible.
• Right to Object: You can object to our processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw consent at any time.

To exercise these rights, you may contact us using the methods provided on our website’s contact page. We will respond to your request in accordance with legal requirements, typically within one month.

Children’s Privacy

Our services are intended for use by adults. We do not knowingly collect personal data from children under 16. Should we discover that we have inadvertently collected such information, we will delete it promptly.

Policy Updates

We reserve the right to update this Privacy Policy from time to time. Any changes will be published on our website, and where material changes are made, we will endeavour to notify you. We encourage you to review this policy periodically to remain informed about how we protect your data.

Contact and Complaints

If you have any questions or concerns regarding this Privacy Policy or your personal data, you are encouraged to reach out to us via the contact section of our website. Should you feel your data has not been handled satisfactorily, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Thank you for trusting Flower Delivery Hatton with your personal data. We are committed to upholding your privacy rights and maintaining your trust.