Privacy Policy for Flower Delivery Basildon Customers

Introduction

This Privacy Policy explains how Flower Delivery Basildon (“we”, “us”, “our”) collects, uses, and manages your personal information. We are committed to safeguarding your privacy in compliance with the UK General Data Protection Regulation (GDPR). This policy applies to all individuals who place flower delivery orders from Basildon and the surrounding districts, either via our website, by phone, or through other ordering channels.

What Personal Data We Collect

When you place an order with Flower Delivery Basildon, we collect and process various types of personal data. The information we collect may include:

• Identity data: Your name, title, and, if applicable, the recipient’s name.
• Contact data: Your billing and delivery address, email address, and phone number, as well as the recipient’s address and contact number (if different).
• Order details: Details of the product(s) you order, messages you include on cards, and delivery instructions.
• Payment information: Payment card details or transaction information. Please note, card details are processed securely via third-party payment processors; we do not store your full payment card details.
• Technical data: IP address, browser type, time zone setting, and other technology on the devices you use to access our website.
• Communications: Copies of correspondence with us, including order confirmations, customer service queries, and feedback.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. The lawful bases may include:

• Contractual Necessity: Processing your data in order to fulfil a contract, such as delivering flowers you have ordered.
• Legal Obligation: Processing data as required by UK law, such as for tax and accounting purposes.
• Legitimate Interests: Using your data for business purposes, for example, to improve services or prevent fraud, where such interests are not overridden by your rights.
• Consent: If you opt in to receive marketing communications, we will use your data on the basis of your consent. You can withdraw your consent at any time.

How We Use Your Data

We use personal data to:

• Process and deliver your orders.
• Send order confirmations and delivery updates.
• Respond to your enquiries or complaints.
• Comply with legal, regulatory, and tax obligations.
• Detect and prevent fraud.
• Improve our products and customer service.
• Send you marketing offers, if you consent.

Retention Periods

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations, such as retaining records for accounting and tax reasons. Typically, we keep:

• Order and contact details: Up to 7 years after you place an order, to comply with financial regulations.
• Marketing data: Until you withdraw consent or unsubscribe from communications.
• Technical and analytical data: As per our website analytics provider’s retention policies.

Once data is no longer required, it is securely deleted or anonymised.

Data Processors and Third Parties

Your personal data may be shared with trusted third-party providers (“data processors”) who assist us in fulfilling your order or operating our business. These include, but are not limited to:

• Payment processing providers
• Delivery and courier services
• Website hosting and IT support companies
• Customer relationship management systems
• Analytics and marketing providers (where you have consented)

All third parties are required to comply with data protection laws and to process your data only according to our instructions. We do not sell your personal information to anyone.

International Transfers

Your personal data is processed within the UK and the European Economic Area (EEA). If we ever need to transfer your data outside these areas, we will ensure appropriate safeguards are in place, consistent with GDPR requirements.

User Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where there is no legal need for us to keep it.
• Restriction: Ask us to suspend processing of your data under certain circumstances.
• Objection: Object to our processing where we rely on legitimate interests.
• Portability: Request transfer of your data to you or to another service provider.
• Withdraw Consent: If we process data based on your consent, you can withdraw it at any time.

To exercise your rights, please contact us using the details provided on our website. We may need to verify your identity before fulfilling your request.

Security of Your Data

We have implemented appropriate technical and organisational measures to secure your personal data and protect it against unauthorised access, loss, or misuse. Access to your data is limited to those staff and service providers who need it to fulfil their responsibilities.

Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making that produces legal effects or profiles you in any way that significantly affects you.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. The latest version will be available on our website. Please review it periodically for updates.

Contact and Complaints

If you have any queries or concerns about how we use your personal data or wish to make a complaint, please contact us using the methods provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.