Flower Delivery Cranford Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Cranford ('we', 'our', or 'us') collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing flower delivery orders with Flower Delivery Cranford in Cranford and the surrounding districts.

Data We Collect

In providing our flower delivery services, we may collect and process the following categories of personal data about you:

• Identity Information: Full name, title, and other identifiers necessary for processing orders.
• Contact Information: Billing address, delivery address, telephone number, and any additional contact details provided for communication or delivery purposes.
• Order Information: Details of the products ordered, order history, and delivery preferences.
• Payment Information: Payment card details or payment transaction tokens, but note that payment data is processed securely through our third-party payment processor and is not held directly by us.
• Correspondence: Records of communication if you contact customer service, provide feedback, or engage via our website form.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Flower Delivery Cranford relies on the following grounds:

• Contract Performance: Necessary to process, confirm, and deliver your orders made through our service.
• Legal Obligation: To comply with legal requirements regarding taxation, accounting, and record-keeping.
• Legitimate Interest: To improve our services, manage customer relationships, and respond to your enquiries. We always balance our legitimate interests against your rights and freedoms.
• Consent: Where we rely on consent for specific types of processing, such as receiving marketing communications, you may withdraw your consent at any time.

How We Use Your Data

Your personal data is used solely for purposes relevant to our flower delivery services:

• Processing and delivering orders to the specified addresses.
• Contacting you to confirm orders, delivery schedules, or resolve issues affecting your purchase.
• Managing payments, refunds, and financial transactions.
• Responding to your customer service enquiries and requests.
• Improving and personalising our customer service and website experience.
• Complying with legal, regulatory, or tax obligations.
• Where agreed, sending you information about our services, offers, or seasonal promotions.

Data Retention

We retain personal data only as long as is necessary for the purposes described above and in accordance with legal obligations. Typically, order and corresponding customer data is retained for up to 6 years for accounting and tax compliance, unless a longer retention period is required by law. Data collected for marketing purposes is retained until you opt out or withdraw consent.

After the applicable retention period, your personal data will be securely deleted or anonymised.

Data Processors and Third Parties

To provide parts of our service, we may share your personal data with trusted third-party service providers (data processors). These include:

• Payment Processors: To securely handle transactions and process payments.
• IT and Web Hosting Providers: To support our online ordering platform and data storage.
• Delivery Partners: In limited cases, if we engage third-party couriers for certain deliveries.
• Professional Advisors: Such as accountants and legal advisors, for compliance and governance.

All processors act under written agreements and may only process data according to our instructions and GDPR guidelines. Personal data is not sold or shared outside these arrangements unless required by law or you have provided explicit consent.

International Transfers

Flower Delivery Cranford operates within the UK and primarily stores and processes your personal data within the European Economic Area (EEA). On occasions where data may be transferred outside the EEA, we ensure that such transfers have appropriate safeguards in line with GDPR requirements.

Your Rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of your personal information we hold about you.
• Right to Rectification: You can request correction of any inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data where lawful grounds apply.
• Right to Restrict Processing: You may request limitations on how we process your data in certain situations.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format for transfer to another provider.
• Right to Object: You can object to processing where we rely on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw this at any time.

To exercise any of these rights, please contact us using the contact details provided on our website. We may need to verify your identity before processing your request. We will respond within the timescales permitted by law.

Security of Your Data

We implement appropriate technical and organisational measures to safeguard your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes access controls, encrypted data transfers, and regular security assessments of our systems and third-party providers.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in law, our business practices, or our processing activities. When this occurs, the updated policy will be published on our website with the 'last updated' date. Your continued use of our services following any such changes indicates your acceptance of the updated Privacy Policy.

Contacting Flower Delivery Cranford

If you have any questions regarding this Privacy Policy, how your data is handled, or wish to exercise your data protection rights, please refer to our website for contact information. We are committed to responding promptly and to addressing concerns in relation to your privacy.