Privacy Policy for Flower Delivery Islington Customers

Introduction

This Privacy Policy describes how Flower Delivery Islington ("we", "us", or "our") collects, uses, protects, and processes your personal data in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders from Islington and the surrounding districts. Please review this policy carefully to understand your rights and how your information is handled.

What Data We Collect

When you place an order or interact with Flower Delivery Islington, we may collect the following categories of personal data:

• Identification Data: Name, title, and delivery recipient name
• Contact Information: Address, delivery address, phone number
• Order Details: Product selections, order notes, delivery instructions
• Payment Data: Payment method, billing address (note: payment details such as card numbers are only processed by our payment processor and not stored by us)
• Communications: Messages, feedback, and queries sent to us
• Technical Data: IP address, browser type, device type, and cookies (as necessary for secure website operation and fraud prevention)

Lawful Basis for Processing

Our collection and processing of your personal data is always based on at least one lawful ground under GDPR. These include:

• Contractual Necessity: We process your data to fulfil your order, deliver flowers, and provide customer support as necessary to perform our contract with you.
• Legal Obligation: We retain records for accounting, tax, and other regulatory obligations.
• Legitimate Interests: We may use your data to improve our customer service, prevent fraud, and enhance the security and operation of our services, but these uses will not override your fundamental rights and freedoms.
• Consent: In some cases, we may ask for your explicit consent, such as for direct marketing. Where consent is relied upon, you can withdraw it at any time.

Purpose of Collecting Your Data

Your personal data is collected and processed for the following purposes:

• Processing and fulfilling flower delivery orders
• Managing customer relationships and responding to enquiries
• Processing payments securely through our payment partners
• Improving our services and understanding customer preferences
• Complying with applicable laws and regulations
• Preventing fraud and ensuring the integrity and security of our operations

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or regulatory requirements. Typically, we keep order and customer account data for up to seven years after your last transaction, in line with legal obligations. Personal data processed for marketing purposes based on consent is held until you withdraw that consent or request erasure.

Data Processors and Third Parties

To provide our services, we may share your data with the following categories of trusted third-party data processors, under written agreement and only as necessary:

• Payment service providers for secure payment processing
• Delivery partners for order fulfilment in Islington and surrounding districts
• IT hosting, cloud storage, and website support providers
• Professional advisors (such as accountants or legal consultants) as required by law

All third-party processors are required to process your data only as instructed by us and in compliance with applicable data protection laws. We do not sell or rent your personal data to third parties.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include restricting data access to authorised personnel, secure storage, and compliance processes in line with GDPR requirements. While we strive to protect your data, no online transmission is completely secure. We encourage you to take steps to protect your own data, such as safeguarding passwords and using secure networks.

Your GDPR Rights

As a customer of Flower Delivery Islington, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data, where there is no overriding legal requirement to retain it.
• Right to Restrict Processing: You may request us to restrict how your data is processed, under certain circumstances.
• Right to Data Portability: You can request transfer of your data to another provider in a structured, commonly used format.
• Right to Object: You may object to processing of your data for marketing or other purposes where we rely on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner’s Office if you are dissatisfied with how we handle your data.

If you wish to exercise any of these rights, please contact us using the contact details provided on our website or during order placement.

International Data Transfers

We primarily process your personal data within the UK and the European Economic Area (EEA). If your data needs to be transferred outside these areas, appropriate safeguards will be in place to ensure your information remains protected in accordance with GDPR standards.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service offerings. Any significant changes will be communicated to you, where feasible, via our website or by other appropriate means. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or how your personal data is handled, please use the contact methods provided on our website to reach our Data Protection Officer.

Last updated: June 2024