Your Data and Privacy at Flower Delivery St Mary Cray

Privacy Policy for Flower Delivery St Mary Cray Orders

Introduction

At Flower Delivery St Mary Cray, we are committed to protecting your personal data and upholding your rights under the UK General Data Protection Regulation (GDPR). This privacy policy outlines how we collect, use, store, and share your personal information when you place flower delivery orders with us in St Mary Cray and the surrounding districts. Please read the following information carefully to understand our practices regarding your data.

What Data We Collect

We collect and process several types of personal data to fulfill your orders and provide a satisfactory customer experience. The data we gather may include:

Contact Information: such as your full name, delivery address, billing address, phone number, and any additional contact details you voluntarily provide.
Order Details: including products chosen, delivery instructions, personalised card messages, and recipient information (such as recipient name and delivery address).
Payment Information: such as payment card details (these are processed securely via our payment processors and are not stored by us).
Communication Records: including the content of any correspondence you have with us about orders, queries, or complaints.
Usage Data: such as IP address, browser type, device information, date and time of your visit, and how you use our website. This data is collected via cookies or similar technologies to improve our website and service.

Lawful Basis for Processing Your Data

We process your personal data only when we have a lawful basis to do so. The key lawful grounds we rely on under the GDPR are as follows:

Contractual Necessity: We process your information to fulfil the contract of sale and delivery you enter into when placing an order with us.
Legal Obligations: We may process and retain certain data as required by law, such as for accounting or tax purposes.
Legitimate Interests: We may process your data for legitimate business reasons, such as improving our services, resolving issues, fraud prevention, or marketing (with appropriate consent as required).
Consent: In cases where processing is not covered by the above grounds, we will ask for your explicit consent, and you may withdraw this consent at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

To process and deliver your flower order to the specified recipient.
To communicate with you about your order, including order confirmations, updates, and delivery notifications.
To handle customer service enquiries or complaints.
To improve our website, products, and customer experience using aggregated usage data.
To comply with legal requirements and exercise our legal rights.
Where consent has been given, to send you marketing communications or information about products and offers (you may opt-out at any time).

Data Sharing and Third-Party Processors

Your data may be shared with third parties only when necessary and in accordance with GDPR. These third parties serve as data processors and are contracted to protect your information. Examples include:

Payment Processors: for secure transaction processing (we do not store your card details).
Delivery Partners: to facilitate the prompt and accurate delivery of your order.
IT Service Providers: for website hosting, maintenance, and support.
Professional Advisors or Legal Authorities: where disclosure is required by law or to protect our rights.

We never sell or rent your personal data to third parties. Where processors are used, we ensure they have appropriate safeguards and data protection agreements in place.

International Data Transfers

Your personal information is processed in the UK. In rare cases where your data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards under GDPR, such as standard contractual clauses or adequacy decisions, to protect your data.

How Long We Retain Your Data

We retain your personal data only for as long as necessary to fulfil the purposes it was collected, including for legal, regulatory, and accounting requirements:

Order details and transaction data: retained for up to 7 years to comply with tax and accounting laws.
Customer service records: retained for up to 3 years after your last interaction to resolve issues or claims.
Marketing data: retained until you opt-out or withdraw consent.

Once your data is no longer required, it will be securely deleted or anonymised.

Your Rights Under GDPR

Under the GDPR, you have several rights with regard to your personal data. These include:

Right to Access: You can request access to your personal data and receive a copy of the information we hold about you.
Right to Rectification: You can request to correct or update inaccurate or incomplete data.
Right to Erasure ('Right to be Forgotten'): You can request deletion of your personal data under certain conditions.
Right to Restrict Processing: You can ask us to restrict processing of your data in specific circumstances.
Right to Data Portability: You can request to receive your data in a portable format or have it transmitted directly to another controller.
Right to Object: You can object to the processing of your data for direct marketing or on grounds relating to your particular situation.
Right to Withdraw Consent: Where your data is processed based on consent, you may withdraw this at any time without affecting the lawfulness of processing prior to withdrawal.

We will respond to all data subject requests in accordance with GDPR requirements and within one month of receipt.

How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data from accidental loss, unauthorised access, use, alteration, or disclosure. Measures include encrypted connections (such as HTTPS), secure servers, access controls, and staff training on data protection responsibilities.

Policy Scope and Updates

This privacy policy applies to all customers placing Flower Delivery St Mary Cray orders in St Mary Cray and the surrounding districts. We may update this policy from time to time to reflect changes in our practices, legal obligations, or services offered. The updated policy will be made available on our website, with the effective date clearly indicated.

Contact and Complaints

If you have questions or concerns about how we handle your personal data, or if you wish to exercise your data protection rights, please contact us through our website’s contact facility or by post. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your rights have been infringed.

We are committed to ensuring your privacy is respected and protected at all times when you use Flower Delivery St Mary Cray’s services.