Privacy Policy for Flower Delivery Potters Bar

Our Commitment to Your Privacy

At Flower Delivery Potters Bar, your privacy is of utmost importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you place an order for flower delivery within Potters Bar and the surrounding districts. In compliance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws, we are dedicated to safeguarding your privacy and ensuring transparency regarding how your personal data is handled.

Scope of This Privacy Policy

This policy applies to all individuals who place orders or interact with Flower Delivery Potters Bar in Potters Bar or neighbouring areas. Whether you use our website, make a phone order, or contact us directly, this policy sets out how your data is processed and your associated rights under the GDPR.

What Personal Data We Collect

When you place an order or make an enquiry with Flower Delivery Potters Bar, we may collect the following types of information:

• Contact Details: Including your full name, address, telephone number, and occasionally delivery recipient’s details.
• Order Information: Details of the products purchased, delivery instructions, and transaction details.
• Payment Information: While your payment card details are processed securely by approved payment processors and not directly stored by us, we may receive payments’ confirmation and limited payment metadata.
• Communications: Any correspondence sent to us, such as emails or notes added to an order, including any feedback.
• Technical Information: This can include browser type, IP address, and website usage statistics, typically collected via cookies for site functionality and analytics.

Lawful Basis for Processing

We ensure that all personal data collected is processed lawfully, fairly, and transparently. The primary lawful bases under which we process your information are:

• Contractual Necessity: To process and deliver your order correctly, it is necessary to collect and use your information.
• Legal Obligation: We may be required to keep transaction records or communications to comply with applicable laws and regulations.
• Legitimate Interests: Some processing is necessary for our legitimate business interests, such as maintaining records, improving services, or handling customer queries; we always balance these interests against your data protection rights.
• Consent: For activities beyond those above, such as direct marketing or the use of some analytical cookies, we will seek your explicit consent.

How We Use Your Data

Your data is used only for the purposes stated when it is collected, which include:

• Processing and fulfilling orders.
• Handling customer service queries and managing order amendments or difficulties.
• Sending order confirmations, delivery updates, and, where applicable, marketing communications (where you have opted in).
• Managing accounts, payments, and refunds.
• Complying with legal and regulatory requirements, such as accounting or taxation rules.
• Improving the performance and usability of our website and services.

Retention of Your Data

Your personal data is kept only for as long as necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, customer order data is held for up to six years to meet UK accounting and taxation rules. After this period, your data will be securely deleted or anonymised to prevent identification.

If you have subscribed to marketing communications, your details will be held until you withdraw your consent or unsubscribe. Technical and analytics information may be kept for up to two years to assess service quality and performance.

Data Processors and Third Parties

To provide our products and services efficiently, we may share aspects of your data with trusted third parties who help us deliver our service, including:

• Payment service providers for secure transaction processing.
• Delivery couriers or postal services for order completion.
• IT and web hosting providers who support our technology infrastructure.

All data processors are carefully selected, contracted, and required to comply fully with our data protection requirements and applicable laws. Personal data is never sold or shared with third parties for their own marketing purposes.

Your Rights Under GDPR

Under the GDPR, you have a number of important rights concerning your personal data, including:

• The right to access: You can request information about the personal data we hold about you and how it is processed.
• The right to rectification: You can request correction of incomplete or inaccurate data.
• The right to erasure: Also known as the 'right to be forgotten', you may ask us to delete your personal data where there is no good reason for us to continue processing it.
• The right to restrict processing: You can ask us to suspend processing of your personal data in certain situations.
• The right to data portability: You have the right to request your data in a structured, commonly used and machine-readable format.
• The right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Rights in relation to automated decision-making: We do not use personal data for automated decision-making or profiling.

To exercise any of these rights, or if you have questions about how your data is used, please contact us using the details available on our website or via the contact mechanisms present when you place an order.

Data Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes limiting access to your data to only those employees and third parties who require it to fulfil your order or service requests, and who are subject to strict confidentiality obligations.

Updates to Our Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to our practices, legal or regulatory developments. Any changes will be clearly indicated on our website. We encourage you to review this policy regularly to remain informed of how we protect your data.

Contact and Further Information

If you require additional information, wish to exercise your rights, or have concerns about your data, please refer to the contact information provided on our website or use the communication method supplied when placing an order.

Your use of Flower Delivery Potters Bar services implies acceptance of this Privacy Policy as it relates to the collection, use, and sharing of your information in accordance with GDPR and applicable law.