Privacy Policy for Flower Delivery Borehamwood Orders

About This Privacy Policy

This Privacy Policy outlines how Flower Delivery Borehamwood collects, processes, and safeguards your personal data when you place orders for flower delivery in Borehamwood and the surrounding districts. We are committed to ensuring your privacy and protecting your personal data in full compliance with the UK General Data Protection Regulation (GDPR).

Scope of the Policy

This policy applies to all individuals who use our services to place orders for flower delivery from Flower Delivery Borehamwood, whether through our website, over the phone, or via any other ordering method. If you are a customer or recipient within Borehamwood or its neighbouring areas, this Privacy Policy explains how we handle your information.

What Personal Data Is Collected

In the course of providing our services, we may collect and process the following types of personal data:

• Contact Information: Such as your full name, delivery address, billing address, phone number, and any contact details required to fulfil the order.
• Order Details: Information about the products you purchase, delivery instructions, and preferences regarding the service.
• Payment Information: Partial payment details such as the payment method and transaction identification. We do not store your full credit or debit card details; these are processed securely by our payment processor.
• Communications: Records of correspondence, including enquiries, instructions, complaints, or feedback relating to your order.
• Technical and Usage Data: Information about your use of our website, including your IP address, browser type, and device information, collected through cookies and other tracking technologies.

Lawful Basis for Processing Your Data

According to the GDPR, we must have a legal basis for collecting and using your personal data. Our use of your information is typically justified by one or more of the following grounds:

• Contractual Necessity: Processing your data is necessary to fulfil the flower delivery service you requested, including taking your order, processing payment, and arranging delivery.
• Legitimate Interests: We use your data to improve our services, handle queries or complaints, and prevent fraudulent activity, provided these interests do not override your privacy rights.
• Legal Obligations: In some cases, we are legally required to retain certain information for purposes such as tax or accounting compliance.
• Consent: For certain non-essential uses, such as marketing communications, we will seek your explicit consent before processing your data for these purposes.

How We Use Your Personal Data

We process your personal information strictly for the following purposes:

• To accept and fulfil your flower delivery orders
• To process payments associated with your orders
• To communicate with you about your order or account
• To respond to your queries, requests, or complaints
• To analyse and improve our services
• To comply with legal and regulatory obligations
• With your consent, to send you occasional marketing or promotional information (you can opt out at any time)

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, and for as long as is required by law. Typically, we keep order-related information for up to seven years to comply with accounting and tax regulations. Once retention periods expire, we will securely erase or anonymise your personal data.

Sharing Your Data with Third-Party Processors

To provide our services efficiently, we may engage third-party data processors. These may include:

• Payment service providers to facilitate secure payments
• Courier partners to arrange for the delivery of your order
• IT service providers who maintain our website and data storage infrastructure
• Professional advisors (e.g., accountants) where required by law

All third parties are contractually obliged to handle your data securely, process only for the instructed purpose, and not to use your data for their own business purposes. We do not sell, rent, or otherwise share your personal data with third parties for marketing purposes without your clear consent.

International Data Transfers

In rare circumstances, your personal data may be transferred and processed outside of the United Kingdom. When this occurs, we ensure adequate safeguards, such as Standard Contractual Clauses, are in place to protect your privacy rights.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of your personal data held by us.
• Right to Rectification: If any information we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure ('Right to be Forgotten'): You may request the deletion of your personal data, subject to certain conditions.
• Right to Restrict Processing: You can request us to limit the way we use your data.
• Right to Data Portability: In certain cases, you can request to receive your data in a machine-readable format or have it transferred to another provider.
• Right to Object: You can object to our processing of your data when it is based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have not handled your data in accordance with the law.

If you wish to exercise any of these rights, please contact us using the contact methods provided on our website or order confirmation documentation.

How We Protect Your Data

We implement appropriate technical and organisational measures to ensure your personal data is protected from unauthorised access, loss, alteration, or disclosure. This includes secure servers, encrypted data transmission, and restricted access to your personal information within our organisation.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any substantial changes will be communicated through our website or other appropriate channels. Please review this policy periodically to remain informed about how we use and protect your data.

Contacting Us

If you have any questions or concerns regarding this Privacy Policy or your data protection rights, please reach out via the contact information available on our website or in your order documentation. We will respond to your enquiry as promptly as possible.