Privacy Policy for Flower Delivery Camberwell Customers
About This Privacy Policy
At Flower Delivery Camberwell, your privacy is a top priority. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data when you place an order with us from Camberwell and surrounding districts. It also explains your rights under the General Data Protection Regulation (GDPR) and how you can exercise them. Please read this policy carefully before using our services.
Scope and Applicability
This Privacy Policy applies to all customers (“you”) who place orders with Flower Delivery Camberwell, whether by phone, online, or in person, specifically within Camberwell and adjacent areas. By placing an order, you agree to the terms in this policy.
What Personal Data We Collect
To provide our floral delivery services, we may collect and process the following categories of personal data:
- Identity Data: Your full name.
- Contact Data: Delivery address, billing address, telephone number, and, if applicable, your email address.
- Order Details: Information about your order, such as product selections, card messages, delivery instructions, and occasion type.
- Recipient Information: Name, address, and contact number of the recipient if different from customer.
- Payment Data: Payment method details (e.g., card type), but we do not retain your complete card information; payment is processed securely through our chosen payment processors.
- Correspondence: Records of your communications with us, such as emails, feedback, or complaints.
- Technical Data (if ordering online): Information such as IP address, browser type, device used, and pages visited, collected via cookies or similar technologies.
Lawful Basis for Processing
We process your personal data based on the following lawful grounds:
- Contractual Necessity: To fulfill our contract with you, including processing and delivering your order, we must collect and use certain personal data.
- Legitimate Interests: We may use your data to improve our services, handle customer service requests, maintain security, prevent fraud, and market our products to existing customers, provided such use does not override your fundamental rights.
- Legal Obligations: Certain data may be retained or disclosed to comply with applicable laws, such as tax or accounting regulations.
- Consent: We will rely on your explicit consent only for certain activities, such as sending marketing communications to new customers or using certain website tracking cookies. You may withdraw your consent at any time.
How We Use Your Personal Data
We use your information for the following purposes:
- To process and deliver your floral orders, including sharing data with delivery staff or couriers.
- To communicate order updates, delivery confirmations, or resolve any queries you may have.
- To process your payment securely through authorised payment service providers.
- To improve our services based on feedback and usage patterns.
- To send you service or promotional messages where permitted by law or with your consent.
- To comply with legal and regulatory obligations.
Data Retention
Personal data is retained for as long as necessary to fulfill the purposes outlined in this policy, including satisfying legal, accounting, or reporting requirements. Specifically:
- Order and Contact Data: Retained for up to 6 years after your last order, to fulfill accounting and tax obligations and to manage customer service issues.
- Payment Data: Card details are never stored by us. Only transaction references and values are retained for record-keeping.
- Marketing Preferences: If you subscribe to marketing communications, your data will be held until you unsubscribe or withdraw consent.
- Technical Data: Usually kept for up to 12 months to monitor site usage and maintain security.
We will securely delete or anonymize data when it is no longer needed.
Data Sharing and Processors
We respect your privacy and do not sell your data. However, your data may be shared with trusted third-party processors who help us deliver our services. Examples include:
- Payment service providers for secure transaction processing.
- Delivery providers (e.g., couriers) to ensure successful order delivery.
- IT service providers who support our website and electronic systems.
- Professional advisers, such as accountants or legal consultants, if required.
- Regulatory bodies or law enforcement, if obligated by law.
All our third-party processors are contractually bound to process your data securely and only in accordance with our instructions.
Your GDPR Rights
As a customer, you have several rights under GDPR:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Ask us to correct any inaccurate or incomplete information.
- Right to Erasure: Request deletion of your personal data under certain circumstances.
- Right to Restrict Processing: Ask us to restrict the use of your data in certain situations.
- Right to Data Portability: Request that we provide your data in a commonly used format to you or another provider.
- Right to Object: Object to our use of your data where we rely on legitimate interests, including for direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw this at any time.
- Right to Lodge a Complaint: Contact your local data protection authority if you believe your data has been misused.
To exercise any of these rights, please contact us using the details provided on our website or in your order confirmation. We will respond to your request in accordance with GDPR requirements.
Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorized access, loss, misuse, or alteration. This includes access controls, secure networks, and regular staff training. Although we aim for maximum security, no method of data transmission or storage can be guaranteed as 100% secure.
International Transfers
Your data is primarily processed within the United Kingdom and European Economic Area (EEA). If we ever need to transfer your personal data outside the EEA, we will ensure appropriate safeguards are in place to protect your rights as required by GDPR.
Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated clearly to our customers. We recommend reviewing this policy periodically to stay informed about our data practices.
Contact and Further Information
If you have any queries regarding this Privacy Policy, your personal data, or wish to exercise your rights, please use the contact information available on our website or within your order confirmation. We are committed to working with you to resolve any concerns promptly.